pub fn start_capture(interface_name: &str, bpf_program: &str)