> for real time log parsing

Or other things!

  tcdump -i <if> -l | pw    # -l for line buffering

Now you have an interactive network monitor that, in some ways, has better ergonomics than Wireshark. Want IPV6 only?

  :g IP6 

done. Okay, only packets from bob to alice:

  :g bob.*>.*alice

Only UDP:

  :g UDP

Forget UDP, how about http:

  :r
  :g http

Kind of thing.