title: tcpdump filter src dst port
body: <p>I need to sniff voip traffic on 5060 port.
  And at the same time I need to exclude all packets where src port 5060 and dst port 5061</p>
  
  <p>I need something like:</p>
  
  <pre><code>tcpdump -i any -vvv -s0 port 5060 and (not src port 5060 and not dst port 5061)  
  </code></pre>
  
  <p>but the second part of the filter should be related to a single packet, not all traffic. How can I do that?</p>