I would like to know how to monitor tcp traffic between my `localhost` and IP address keeping activities in a file. I tried iftop and tcptrack but I can not keep activities in a file. These tools don't target a specify IP address, they're monitoring the interface only : 

```
iftop -i eth2 -f "dst port 22"

```

I tried to put the IP address in place of `dst` but it doesn't work.
The idea is for detecting any suspect traffic

Thanks for help