10.10.0.1:/home/login # tcpdump -ni lag0.10 arp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on lag0.10, link-type EN10MB (Ethernet), capture size 65535 bytes
00:43:37.304824 ARP, Request who-has 10.10.10.1 tell 10.10.0.1, length 28
00:43:37.304964 ARP, Reply 10.10.10.1 is-at xx:xx:xx:xx:xx:xx, length 46
00:43:37.802121 ARP, Request who-has 10.10.0.1 tell 10.10.20.27, length 46
00:43:37.802146 ARP, Reply 10.10.0.1 is-at xx:xx:xx:xx:xx:xx, length 28
00:43:38.804270 ARP, Request who-has 10.10.0.1 tell 10.10.20.27, length 46
00:43:38.804287 ARP, Reply 10.10.0.1 is-at xx:xx:xx:xx:xx:xx, length 28
00:43:39.806996 ARP, Request who-has 10.10.0.1 tell 10.10.20.27, length 46
00:43:39.807014 ARP, Reply 10.10.0.1 is-at xx:xx:xx:xx:xx:xx, length 28