If you “tcpdump | grep” and you have to wait some time to see the output, that’s probably because stdout is buffered via libc (eg. printf).

If you want to flush() the output at every line (aka line buffered), just use “tcpdump -l”.