pcap_open_dead(3pcap) on Linux

The text a649e0f44df8, as Debian 7 (Wheezy), Debian 6.0 (Squeeze) shipped it.

open a fake pcap_t for compiling filters or opening a capture for output