Yes that patch is correct and fixes the problem for ngrep, the github issue is worded poorly since it's meant to loop infinitely with a max_packets set to zero. On an unpatched libpcap it just never finds any packets since packets_to_read also gets set to zero

