always need an interface name when sniffing