I turn on tcpdump to capture requests going to my webserver. However, some of the requests are not captured by tcpdump but they showed up in apache access log. Those requests are usually long running request (~ 120 sec) with a large content length (~ 16300)
Here is my command for capture
sudo tcpdump -n -i any 'port 80 and dst 192.168.23.79' -w capture.cap -s0
What can I do to capture these type of requests?