if (cap_enter() < 0)
 error("cap_enter: %s",pcap_strerror(errno));


status = pcap_loop(pd, cnt, callback, pcap_userdata);


if (cap_rights_limit(whod,CAP_WRITE | CAP_FTRUNCATE | CAP_FSTAT) < 0 && errno != ENOSYS) {
      syslog(LOG_WARNING, "cap_rights_limit: %m");
      exit(1);
}