tcpdump -n -i ens192 port 514 -w ens192-2.cap
F5:tcpdump -ni 0.0:nnnp -s0 host 172.23.X and tcp port 8000 or host 172.23.X and tcp port 8000 -vvv -w /tmp/X.cap
