Is it possible to write a tcpdump filter rule for src host == dst host, without saying what those IPs explicitly are?
@grifferz tshark works like tcpdump but you can use wireshark filtering https://www.wireshark.org/docs/wsug_html_chunked/AppToolstshark.html
