up a tcpdump on both the inside and outside interfaces on the firewall
at boot time.  Another useful form of debugging.

Note: as with the "accept" and "deny" styles of logging, "tcpdump" cannot
be set through any interface other than setting it in the virt_firewalls
DB table directly.