Please check the VCN type first.
VCN30X0:
step1:upload the rpm package.
step2:Excuting command:rpm -ivh tcpdump-3.9.8-1.23.1.x86_64.rpm.
step3:start capture the package:tcpdump -i ehtx host ip.addr(for example:3.1.218.24) -s0 -vv -w /home/xxx.pacp
(note:The ethX is the name of the network card that is fed back after using the ifconfig command. As shown in the following figure, after entering the ifconfig command, the IP address of the network card name bond0 is 3.1.218.24. If the IP address of the service port needs to be captured, the ethX will be Change to bond0)

VCN5X0:
step1:uplaod the package to /tmp
step2:change the file permissions.command:chmod +x /tmp/*
step3:start capture the package,command:/tmp/tcpdump_3536 -s0 -i bond0 host ip.addr -w -vv /home/xxx.pacp