It uses some code from `tcpdump`'s source, but it depends only upon `libpcap`, which is bundled with OSX. The only foolproof test that I can think of would be to write some packets to a pcap file in formula.rb using something like rubypcap.

I did this `sudo tcpdump -i en1 -w sample.pcap -c 10; bittwiste -I sample.pcap -O sample-copy.pcap; cmp sample.pcap sample-copy.pcap` for a rudimentary test for the editor, but that seems fairly kludgy to me.