only call ex_immediate() for live captures
only call ex_immediate() for live captures

The BIOCIMMEDIATE ioctl is only for opened bpf devices, not capture
files or a dead open.

fasguard/fasguard-pcap,fasguard/fasguard-pcap