root@hypervisor ~ # tcpdump -i centos-br0 '( (net 192.168.1.0/24) and (not port 22) )'                                                                                      
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on centos-br0, link-type EN10MB (Ethernet), capture size 262144 bytes
18:51:41.487160 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 1, length 64
18:51:42.487215 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 2, length 64
18:51:43.487229 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 3, length 64
18:51:44.487243 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 4, length 64
18:51:45.487273 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 5, length 64
18:51:46.487254 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo request, id 4765, seq 6, length 64
18:52:02.097182 IP katello.ex-logos.com.34118 > laptop1.ex-logos.com.postgresql: Flags [S], seq 3599693570, win 29200, options [mss 1460,sackOK,TS val 2493942 ecr 0,nop,wscale 7], length 0
18:52:03.099199 IP katello.ex-logos.com.34118 > laptop1.ex-logos.com.postgresql: Flags [S], seq 3599693570, win 29200, options [mss 1460,sackOK,TS val 2494944 ecr 0,nop,wscale 7], length 0
18:52:12.360192 IP laptop1.ex-logos.com > katello.ex-logos.com: ICMP echo request, id 9353, seq 1, length 64
18:52:12.360458 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo reply, id 9353, seq 1, length 64
18:52:13.361499 IP laptop1.ex-logos.com > katello.ex-logos.com: ICMP echo request, id 9353, seq 2, length 64
18:52:13.361806 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo reply, id 9353, seq 2, length 64
18:52:14.362715 IP laptop1.ex-logos.com > katello.ex-logos.com: ICMP echo request, id 9353, seq 3, length 64
18:52:14.362917 IP katello.ex-logos.com > laptop1.ex-logos.com: ICMP echo reply, id 9353, seq 3, length 64
18:52:21.314744 IP laptop1.ex-logos.com.36314 > katello.ex-logos.com.http: Flags [S], seq 181898884, win 29200, options [mss 1460,sackOK,TS val 57936099 ecr 0,nop,wscale 7], length 0
18:52:21.315020 IP katello.ex-logos.com.http > laptop1.ex-logos.com.36314: Flags [S.], seq 3471462954, ack 181898885, win 28960, options [mss 1460,sackOK,TS val 2513159 ecr 57936099,nop,wscale 7], length 0
18:52:22.515224 IP katello.ex-logos.com.http > laptop1.ex-logos.com.36314: Flags [S.], seq 3471462954, ack 181898885, win 28960, options [mss 1460,sackOK,TS val 2514360 ecr 57936099,nop,wscale 7], length 0
18:52:24.515241 IP katello.ex-logos.com.http > laptop1.ex-logos.com.36314: Flags [S.], seq 3471462954, ack 181898885, win 28960, options [mss 1460,sackOK,TS val 2516360 ecr 57936099,nop,wscale 7], length 0
18:52:28.515232 IP katello.ex-logos.com.http > laptop1.ex-logos.com.36314: Flags [S.], seq 3471462954, ack 181898885, win 28960, options [mss 1460,sackOK,TS val 2520360 ecr 57936099,nop,wscale 7], length 0
18:52:36.515191 IP katello.ex-logos.com.http > laptop1.ex-logos.com.36314: Flags [S.], seq 3471462954, ack 181898885, win 28960, options [mss 1460,sackOK,TS val 2528360 ecr 57936099,nop,wscale 7], length 0