Or the best of both worlds, tshark! http://www.wireshark.org/docs/man-pages/tshark.html