The text 4006bc067866, as Debian 6.0 (Squeeze) shipped it.
compile a filter expression
pcap_compile(3pcap) on Linux now
