tcpdump like implementation
