+ /var
+ /var/run
+ /var/run/pcap_dir
+ /var/run/pcap_dir/**