in reply to online tcpdump filter

Sounds like you are Suffering from Buffering. Try the -l flag on tcpdump to turn on line buffering.