Wireshark may be a little more accessible to people not familiar with TCPdump.  People that have some old devices running CIAbook should turn every other service off and watch the traffic from that host over the wire.