复制　　[plain] view plaincopy 　　[root@Rocky ~]# tcpdump arp -i eth0 -c 5 -n 　　tcpdump: verbose output suppressed,何借 use -v or -vv for full protocol decode 　　listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 　　10:59:46.728425 arp who-has 192.168.1.1 tell 192.168.1.110 　　11:00:17.315719 arp who-has 192.168.1.1 tell 192.168.1.111 　　11:00:17.317911 arp who-has 192.168.1.1 tell 192.168.1.111 　　11:00:17.418271 arp who-has 192.168.1.1 tell 192.168.1.111 　　11:00:17.418980 arp who-has 192.168.1.1 tell 192.168.1.111 　　5 packets captured 　　5 packets received by filter 　　0 packets dropped by kernel1.2.3.4.5.6.7.8.9.10.11.12.