This is libpcap; tcpdump is next door.
Update for the Solaris BPF zone handling fix.