diff --git a/pages/common/tcpdump.md b/pages/common/tcpdump.md
index c47b5697d..d1600ebf9 100644
--- a/pages/common/tcpdump.md
+++ b/pages/common/tcpdump.md
@@ -22,3 +22,8 @@
 
 `tcpdump net {{192.168.1.0/24}}`
 
+- capture all traffic except traffic over port 22 and save to a dump file with today's date
+
+```
+tcpdump -w dumpfile.`date +%Y.%m.%d-%H.%M`.pcap not port 22
+```