Connecting to a host through ssh and monitoring the connection with tcpdump spews out a lot of information. Say that we have a peculiar situation, we want to monitor ssh traffic on the server, but not our connection from client terminal to the server. How can we do that?
Host = 10.13.37.3 # replace this with your ip address or hostname/dhcp name
tcpdump not host 10.13.37.3
the "not host x.x.x.x" syntax filters out any connection information from a host, in this case the one we are connecting to the server from.