tcpdump

check ip request ping

tcpdump 'icmp[icmptype] = icmp-echo'

check arp request
tcpdump -l -n arp | egrep 'arp who-has' | head -100 | awk '{ print $NF }' |sort | uniq -c | sort -n

Posted in: tcpdump