interim, turned on with the WITH_TCPMD5 build-time knob. Note that this stuff is in tcpdump CVS but isn't in any releases yet.