tcpdump -t -c 2000 -i eth0 ip 2>/dev/null | awk '{ print $2}' | sort | uniq -c | sort -nr | head -n 5