ruckus$ tcpdump -i br0 host 198.18.2.118
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
17:18:01.673975 IP 198.18.2.118.12225 > 198.18.2.242.12223: LWAPPv0, Data frame, Flags [Last Fragment Bit], length 336
17:18:01.712083 IP 198.18.2.242.12223 > 198.18.2.118.12225: LWAPPv0, Control frame, Flags [Control Bit], length 172
17:18:06.677132 IP 198.18.2.118.12225 > 198.18.2.242.12223: LWAPPv0, Data frame, Flags [Last Fragment Bit], length 336
17:18:06.679455 IP 198.18.2.242.12223 > 198.18.2.118.12225: LWAPPv0, Control frame, Flags [Control Bit], length 172
17:18:11.671320 IP 198.18.2.118.12225 > 198.18.2.242.12223: LWAPPv0, Data frame, Flags [Last Fragment Bit], length 336