anchor.diff:      && git clone https://github.com/the-tcpdump-group/libpcap.git \
       && git clone https://github.com/cglewis/tcpdump.git \
       && git clone https://github.com/wanduow/wandio.git \
  +    && git clone https://github.com/LibtraceTeam/libtrace.git \
  +    && cd /src/wandio \
  +    && ./bootstrap.sh \
  +    && ./configure \
  +    && make && make install \
  +    && cd /src/libtrace \
  +    && ./bootstrap.sh \
  +    && ./configure \
  +    && make && make install \
  +    && apk del libpcap-dev libpcap \
       && cd /src/libpcap \
       && ./configure \
       && make && make install \
       && cd /src/tcpdump \
       && git fetch origin && git checkout send-upstream \
  -    && ./configure \
  -    && make && make install \
  -    && cd /src/wandio \
  -    && ./bootstrap.sh \
       && ./configure \
       && make && make install \
       && rm -rf /src \
  
positive.code:     gcc \
      git \
      libtool \
      linux-headers \
      musl-dev \
      && rm -rf /var/cache/apk/* \
  
negative.code:       vent="" \
        vent.name="ncapture" \
        vent.groups="collection,hidden,network,network_tap_child"
  # TODO: remove custom libcap/tcpdump when cut over to tracepcapd
  # tracepcapd is built first before tcpdump.
  RUN apk add --update \
      autoconf \
      automake \
  