Not seeing SNAT Via TCPDump

i see you add :p, which you probably want to do to combine the client and server side flow right?

i think you need to also do the :nnn before the p

see the example from this K article: https://support.f5.com/csp/article/K13637

tcpdump -nni 0.0:nnnp -s0 -c 100000 -w /var/tmp/capture.dmp host 10.0.0.1

the -nni means doesn't translate IPs to hostname, don't translate port numbers to names and select interface X