how can tell tcpdump to not include the port numbers in the output? Right now it includes the resolved IP + resolved port. I just need the resolved IP address (hostnames)
Do you just want a list of ip addresses?
If so, this will extract the to ip addresses
this will extract the from ip addresses
If you really just want everything other then the ports, this will do the trick (requires gawk)
|show 1 more comment|