HERE ARE SOME USEFUL FLAGS EXTRACTED FROM THE MAN PAGE.  


       -r     Read  packets  from file (which was created with the -w option).
              Standard input is used if file is ``-''.

       -S     Print absolute, rather than relative, TCP sequence numbers.

       -s     Snarf snaplen bytes of data from each  packet  rather  than  the
              default  of  68  (with SunOS's NIT, the minimum is actually 96).
              68 bytes is adequate for IP, ICMP, TCP and UDP but may  truncate
              protocol  information  from  name  server  and  NFS packets (see
              below).  Packets truncated because of  a  limited  snapshot  are
              indicated  in  the  output with ``[|proto]'', where proto is the
              name of the protocol level at which the truncation has occurred.
              Note  that  taking larger snapshots both increases the amount of
              time it takes to process packets and, effectively, decreases the
              amount  of packet buffering.  This may cause packets to be lost.
              You should limit snaplen to the smallest number that  will  cap-
              ture  the  protocol  information  you're interested in.  Setting
              snaplen to 0 means use the required length to catch whole  pack-
              ets.

...


       -t     Don't print a timestamp on each dump line.

       -tt    Print an unformatted timestamp on each dump line.

       -ttt   Print a delta (in micro-seconds) between  current  and  previous
              line on each dump line.

       -tttt  Print  a  timestamp  in default format proceeded by date on each
              dump line.

...

       -v     (Slightly more) verbose output.  For example, the time to  live,
              identification,  total  length  and  options in an IP packet are
              printed.  Also enables additional packet integrity  checks  such
              as verifying the IP and ICMP header checksum.

       -vv    Even  more  verbose  output.  For example, additional fields are
              printed from NFS  reply  packets,  and  SMB  packets  are  fully
              decoded.

       -vvv   Even more verbose output.  For example, telnet SB ... SE options
              are printed in full.  With -X Telnet options are printed in  hex
              as well.

...


       -x     Print  each  packet  (minus  its link level header) in hex.  The
              smaller of the entire packet or snaplen bytes will  be  printed.
              Note that this is the entire link-layer packet, so for link lay-
              ers that pad (e.g. Ethernet), the padding  bytes  will  also  be
              printed  when  the  higher  layer  packet  is  shorter  than the
              required padding.

       -xx    Print each packet, including its link level header, in hex.

       -X     Print each packet (minus its  link  level  header)  in  hex  and
              ASCII.  This is very handy for analysing new protocols.

       -XX    Print  each  packet, including its link level header, in hex and
              ASCII.