Tcpdump Deep Dive - How Tcpdump works in the kernel