check ip request ping
tcpdump 'icmp[icmptype] = icmp-echo'
check arp request
tcpdump -l -n arp | egrep 'arp who-has' | head -100 | awk '{ print $NF }' |sort | uniq -c | sort -n
tcpdump 'icmp[icmptype] = icmp-echo'
check arp request
tcpdump -l -n arp | egrep 'arp who-has' | head -100 | awk '{ print $NF }' |sort | uniq -c | sort -n
