add before, during, after tcpdump; try to fix tcpdump bug;
needs testing