Comment # 5 on bug 1177499 from Michal Suchanek

Replacing the command with dumpcap from wireshark does not work either - the
test fails with EPERM

'dumpcap', '-i', 'lo', '-a', 'duration:1'