When outputting to terminal, "-l" can be a very useful switch if one pipes the output through other utilities. This becomes especially necessary when the packe

When outputting to terminal, "-l" can be a very useful switch if one pipes the output through other utilities. This becomes especially necessary when the packets matching a filter slowly trickle in - i.e. precisely the use case where the direct output to the terminal makes sense. Edit: while troubleshooting IPv6, I frequently need to see only IPv6 Route Advertisements, which in the noise of ND traffic can be tricky with just ND, so I tend to use a below command: tcpdump -ln -i en0 'icmp6 and ip6[40:1]=134' It does not catch the corner cases of other headers added after the basic IPv6 header, keep that in mind !