Question from the Linux test

Tcpdump exits after capturing 1000 packets

Only packets traveling from 10.10.10.10's port 53 to host 172.16.0.1 are captured.

All outbound traffic to host 172.16.0.1 is captured with the exception of connections to port 22.

Outbound and inbound packets from ip address 10.10.10.10 on port 53 are captured.

Tcpdump translates ip addresses and port numbers to hostnames and human friendly names

Interface eth0 is put into promiscious mode during the time the capture takes place.