[markgritter]

Right now it's only based on network packet capture, not tracing the application itself. For packet capture we need CAP_NET_RAW, not SYS_PTRACE.