I've been using tcpdump and it's good, but it exhibits issues here. Other programs like hexinject, tcpflow, and tracedump all use pcap so they delay a bit before displaying the packets.
I've also used raw-sockets which does not lag, but I am unable to get port numbers with raw sockets.
I've looked at the docs for tcpdump, and there seems to be
--immediate-mode. I'm trying to get tcpdump to stop delaying sending its packets.
My current versions are:
tcpdump version 4.6.2
libpcap version 1.6.2
Is there a patch for tcpdump like this or another cli that doesn't delay?