Spoofing working on debian, making progress on pulling the mac out of tcpdump