I'm trying to help someone migrate from Solaris to Linux. He's stuck on snoop. As a first step towards getting him to use tcpdump, is there an implementation of snoop on Linux? Or can someone point me to a usage syntax comparison of the two? --matt