Capture traffic on interface linux

Capture specific traffic to a pcap file

tcpdump -i eth0 -nn host <ip> and port 80 -w /tmp/capture.pcap