built-in pcap captures

Reviewer: @wilmo119

Based on an idea from InCNTRE's fork. CC @jonstout

Uses the PPI linktype which is understood by wireshark. This lets us put the port number into the packet metadata.