// Using an apt dpkg hook to restore tcpdump capabilities after package operations.
DPkg::Post-Invoke {
  "[ -f /usr/bin/tcpdump ] && setcap cap_net_raw=ep /usr/bin/tcpdump || true; [ -f /usr/sbin/tcpdump ] && setcap cap_net_raw=ep /usr/sbin/tcpdump || true";
};
