The text 3fa07a597ed4, as Debian 10 (Buster), Debian 9 (Stretch) shipped it.
set the filter
pcap_setfilter(3pcap) on Linux now