I’ve used tcpdump on my IPFire firewall before (last year) without having to install anything.
Today, when I tried to use it, I had to install it first. Was tcpdump removed from the base packages in a recent update or was it even in the base packages b4 ?