Comment 10 for bug 2052493

FOCAL

apt policy tcpdump
tcpdump:
  Installed: 4.9.3-4ubuntu0.1
  Candidate: 4.9.3-4ubuntu0.2
  Version table:
     4.9.3-4ubuntu0.2 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
 *** 4.9.3-4ubuntu0.1 500
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
        100 /var/lib/dpkg/status
     4.9.3-4 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages

tcpdump -Z root -ni any -s 0 -w /test/pcap.pcap -C 500 -W 500 host 1.1.1.1
tcpdump: /test/pcap.pcap000: Permission denied

apt install tcpdump/focal-proposed
Reading package lists... Done
Building dependency tree
Reading state information... Done
Selected version '4.9.3-4ubuntu0.3' (Ubuntu:20.04/focal-proposed [amd64]) for 'tcpdump'
The following packages will be upgraded:
  tcpdump
1 upgraded, 0 newly installed, 0 to remove and 175 not upgraded.
Need to get 370 kB of archives.
After this operation, 1024 B of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 tcpdump amd64 4.9.3-4ubuntu0.3 [370 kB]
Fetched 370 kB in 1s (349 kB/s)
(Reading database ... 73218 files and directories currently installed.)
Preparing to unpack .../tcpdump_4.9.3-4ubuntu0.3_amd64.deb ...
Unpacking tcpdump (4.9.3-4ubuntu0.3) over (4.9.3-4ubuntu0.1) ...
Setting up tcpdump (4.9.3-4ubuntu0.3) ...
Installing new version of config file /etc/apparmor.d/usr.sbin.tcpdump ...
Processing triggers for man-db (2.9.1-1) ...

apt policy tcpdump
tcpdump:
  Installed: 4.9.3-4ubuntu0.3
  Candidate: 4.9.3-4ubuntu0.3
  Version table:
 *** 4.9.3-4ubuntu0.3 400
        400 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages
        100 /var/lib/dpkg/status
     4.9.3-4ubuntu0.2 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
     4.9.3-4ubuntu0.1 500
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
     4.9.3-4 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages

tcpdump -Z root -ni any -s 0 -w /test/pcap.pcap -C 500 -W 500 host 1.1.1.1
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
^C0 packets captured
0 packets received by filter
0 packets dropped by kernel