What is CaptureTool and why is it still running when I quit Eavesdrop?
In order to facilitate privilege separation and allow for better performance, Eavesdrop launches CaptureTool in order to perform the actual packet capture. CaptureTool sends all data it collects to Eavesdrop for display. Since is has no user interface, CaptureTool relies on messages from Eavesdrop to know what to do and, if a capture is not explicitly stopped when Eavesdrop quits, then a copy of CaptureTool may be left running.
