This is probably 7.1 material. Tcpdump w/ ANK patches is currently in a pretty sad, unmaintained state. It'll be kludge at best. I'd suggest we move to tcpdump-3.5 [or CVS version] from tcpdump.org in the near future.
Agreed, but only when the tcpdump.org version is "cooked". When I last looked at the tcpdump.org version (for Red Hat 6.2, around 12/99)., the ANK version still seemed the better choice. That may have changed now.
Deferred until tcpdump-3.6 is available in the next month or three.
For the record, I've built a few snapshots and ported some patches to 3.6. SRPM and stuff available at http://www.netcore.fi/pekkas/linux/tcpdump-3.6/ Still needs some work, but usable.
For the record, tcpdump-3.6.1 was released yesterday.