diff -Nru tcpdump-4.99.1/debian/changelog tcpdump-4.99.1/debian/changelog
--- tcpdump-4.99.1/debian/changelog	2023-02-10 18:14:22.000000000 +0000
+++ tcpdump-4.99.1/debian/changelog	2024-02-08 13:21:43.000000000 +0000
@@ -1,3 +1,11 @@
+tcpdump (4.99.1-3ubuntu0.2) jammy; urgency=medium
+
+  * debian/usr.bin.tcpdump: allow read/write to .pcapng files along with
+    a permission to the .pcap, .pcapng, .cap files followed by a numeric
+    suffix required by the -W parameter (LP: #2052493)
+
+ -- Georgia Garcia <georgia.garcia@canonical.com>  Thu, 08 Feb 2024 10:21:43 -0300
+
 tcpdump (4.99.1-3ubuntu0.1) jammy; urgency=medium
 
   * debian/usr.sbin.tcpdump: allow tcpdump printing to stdout/stderr when
diff -Nru tcpdump-4.99.1/debian/usr.bin.tcpdump tcpdump-4.99.1/debian/usr.bin.tcpdump
--- tcpdump-4.99.1/debian/usr.bin.tcpdump	2023-02-10 18:14:22.000000000 +0000
+++ tcpdump-4.99.1/debian/usr.bin.tcpdump	2024-02-08 13:21:43.000000000 +0000
@@ -54,7 +54,12 @@
 
   # for -r, -F and -w
   /**.[pP][cC][aA][pP] rw,
+  /**.[pP][cC][aA][pP][nN][gG] rw,
   /**.[cC][aA][pP] rw,
+  # -W adds a numerical suffix
+  /**.[pP][cC][aA][pP][0-9]* rw,
+  /**.[pP][cC][aA][pP][nN][gG][0-9]* rw,
+  /**.[cC][aA][pP][0-9]* rw,
 
   # for convenience with -r (ie, read pcap files from other sources)
   /var/log/snort/*log* r,