tcpdump does not properly drop privileges to the pcap user when starting up.Referenceshttp://www.redhat.com/support/errata/RHSA-2003-174.htmlhttp://www.redhat.com/support/errata/RHSA-2003-151.html