EmSniff is an application that helps you to capture network packets. It differs from TCPDump in that it runs as a service instead of an application. This makes it possible to capture packets in the background. This can help applications like Wireshark to be more secure since they don't have to run with root privileges anymore. They only have to connect to the EmSniff server via libemsniff.