If they are going across the loopback interface, you may have to tell tcpdump to read that interface. On Linux the interface is named lo, so you can use "-i lo". tcpdump -i lo port 7788
linux tcpdump补充
原文：http://www.cnblogs.com/jiu0821/p/7144247.html
