Does this depend on `tcpdump` and, if so, could it use that?