snoopy -f 'ip(s=192.168.1.79) || ip(d=192.168.1.79)'
after optimize: ether(ip(s = 192.168.1.79 || d = 192.168.1.79))
000551 ms 
	ether(s=3c970e4377cb d=3c970e4377cb pr=0800 ln=98)
	ip(s=192.168.1.79 d=192.168.1.17 id=38b8 frag=0000 ttl=255 pr=1 ln=84)
	icmp(t=EchoReq c=0 ck=3ec6 id=a12f seq=12)
	dump(83219fb7050a3d7a14bf5af725b909a618c608b5605c1f2b18191a1b1c1d1e1f)
000552 ms 
	ether(s=3c970e4377cb d=ea9f8f6ba334 pr=0800 ln=98)
	ip(s=192.168.1.17 d=192.168.1.79 id=c3b2 frag=0000 ttl=255 pr=1 ln=84)
	icmp(t=EchoRep c=0 ck=46c6 id=a12f seq=12)
	dump(83219fb7050a3d7a14bf5af725b909a618c608b5605c1f2b18191a1b1c1d1e1f)
001535 ms 
	ether(s=3c970e4377cb d=3c970e4377cb pr=0800 ln=98)
	ip(s=192.168.1.79 d=192.168.1.17 id=4831 frag=0000 ttl=255 pr=1 ln=84)
	icmp(t=EchoReq c=0 ck=c2fd id=a12f seq=13)
	dump(83219fb7050a3d7b14bf5af724f08e256aa6e56eac4a9cb218191a1b1c1d1e1f)
001536 ms 
	ether(s=3c970e4377cb d=ea9f8f6ba334 pr=0800 ln=98)
	ip(s=192.168.1.17 d=192.168.1.79 id=c3ba frag=0000 ttl=255 pr=1 ln=84)
	icmp(t=EchoRep c=0 ck=cafd id=a12f seq=13)
	dump(83219fb7050a3d7b14bf5af724f08e256aa6e56eac4a9cb218191a1b1c1d1e1f)