tcpdump
Show an IP and a port range
tcpdump -an host <ip> and portrange 135-139
tcpdump -i eth0 host 7.x.x.x and port 5060
Write to file
tcpdump -n -s 0 -i eth0 port 53 -w /root/dns.pcap
Read a file
tcpdump -As0 -vv -nn -r /root/dns.pcap
tcpdump -an host <ip> and portrange 135-139
tcpdump -i eth0 host 7.x.x.x and port 5060
tcpdump -n -s 0 -i eth0 port 53 -w /root/dns.pcap
tcpdump -As0 -vv -nn -r /root/dns.pcap