Known Bugs and Limitations

As default, only IP traffic is shown. To see other protocols use ethernet mode (-m ethernet)

libpcap has a bug for which a filter -f "ip" doesn't show icmp traffic.

Most NFS traffic will show up as UDP_FRAGMENT, and even some as just RPC