Use pcap_create() instead of pcap_open_live(), when available.

pcap_open_live() does the same thing this code does, but future
commits will add stuff that only works when using pcap_create().
Use pcap_set_immediate_mode() to remove buffering delay.
Add option -m to allow setting timestamp type.
Friendlier error message if setting timestamp type fails.