tcp dump is probably not in your path. You'll need to figure out where tcpdumps executables are located and run them from there. most programs get dropped in /usr/local/someplace. That or run a search for the executable. Most executables in user mode need to be run with either sh foo or ./foo I hope this helps!