pcap_dump(3pcap) on Linux

The text 2a92bfc742f8, as Debian 12 (Bookworm), Debian 11 (Bullseye) shipped it.

write a packet to a capture file

pcap_dump(3pcap) on Linux now