Why would one want to force "tcp" in a "tcpdump" filter when using "port", given port numbers are defined in TCP Headers (as opposed to IP)
In other words, is
tcpdump tcp and port 10000
tcpdump port 10000
I would force TCP if I wanted, for example, to see only DNS packets that are being transported over TCP (as opposed to the default UDP).