Although the man page says section 1, Debian and others put it in section 8 (for admin tools). See tcpdump(8).
2 pages link to tcpdump(1):
