Filter a particular mac address
tcpdump -n ether host xx:xx:xx:xx:xx:xx
Capture DHCP
tcpdump -n port 67