Move to libpcap because we get PACKET_RX_RING for free.

And we also get compiled expressions, so we can do:

    rtpsniff eth0 'not port 53'