sudo tshark -i enp0s25 -V -f "ether host 01:00:0c:cc:cc:cc and ether[16:4] = 0x0300000C and ether[20:2] == 0x20000" -c 2