can tcpdump work in windows?

Tcpdump on Windows is called WinDump.

And apparently there is also at least one commercially available version of tcpdump for Windows. See the MicroOLAP TCPDUMP for Windows 3.9.8 page for more details.

Wireshark also provides other command-line packet capture tools that you might find useful as well, such as dumpcap, as Jasper already mentioned, and tshark.

If you're looking for Windows packet capture solutions in general, and not necessarily just command-line sniffer solutions, then you could also try Microsoft Network Monitor, or a number of other tools as well. Finally, you can use Wikipedia's Comparison of packet analyzers page to quickly find many analyzers that run on Windows and rather quickly and easily compare them.

You can just use dumpcap.exe that comes with Wireshark, it basically does the same as tcpdump. You'll find it in the Wireshark installation directory, and dumpcap -h will give you a help screen.