tcpdump -e -r capturefile.pcap ether proto 0x0842 # wake on lan (wol) 11:39:59.577045 00:50:56:b6:6a:ca (oui Unknown) > Broadcast, ethertype Unknown (0x0842), length 116: 0x0000: ffff ffff ffff 1803 73dc 50c6 1803 73dc ........s.P...s. 0x0010: 50c6 1803 73dc 50c6 1803 73dc 50c6 1803 P...s.P...s.P... 0x0020: 73dc 50c6 1803 73dc 50c6 1803 73dc 50c6 s.P...s.P...s.P. 0x0030: 1803 73dc 50c6 1803 73dc 50c6 1803 73dc ..s.P...s.P...s. 0x0040: 50c6 1803 73dc 50c6 1803 73dc 50c6 1803 P...s.P...s.P... 0x0050: 73dc 50c6 1803 73dc 50c6 1803 73dc 50c6 s.P...s.P...s.P. 0x0060: 1803 73dc 50c6 ..s.P.