ngrep: find libpcap on Xcode-only systems