nwatch(1p) on Linux
The text c8f0b70d829b, as Debian 3.1 (Sarge) shipped it.
watch an interface for TCP/IP traffic, storing the results in an nmap- and NDiff-compatible format.
Flags it lists
-
-d -
-device -
-o -
-output