pcap_open_dead(3pcap) on Linux

The text db7a17352f68, as Debian 10 (Buster), Debian 9 (Stretch) shipped it.

open a fake pcap_t for compiling filters or opening a capture for output