tcpdump -q -X host skytest and /(src port 9006 or dst port 9006/) -w test.cap test.cap 可以用 wireshark 打开