tcpdump 已经加了 -e 参数了，结果如下：

locusta:/home # tcpdump -i any port 80 -e
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes
22:49:54.431353  In ethertype IPv4 (0x0800), length 465: 192.168.1.7.63257 > 192.168.1.8.http: Flags [P.], seq 650211879:650212276, ack 2890145972, win 64968, options [nop,nop,TS val 17715629 ecr 14483388], length 397
22:49:54.431847 Out 00:0c:29:7a:01:e8 (oui Unknown) ethertype IPv4 (0x0800), length 259: 192.168.1.8.http > 192.168.1.7.63257: Flags [P.], seq 1:192, ack 397, win 7504, options [nop,nop,TS val 14493116 ecr 17715629], length 191

请高手指点。