A thin wrapper around tcpdump that is installed with cap_net_raw and cap_net_admin set.