diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump
new file mode 100644
index 0000000000..297dc03d2a
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-analyzer/tcpdump
@@ -0,0 +1,2 @@
+# Override the prefix that breaks building with sysroots.
+export EXTRA_ECONF="--with-crypto=yes"
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
index 2e351392c3..c667b23a36 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
@@ -21,7 +21,7 @@
 =dev-libs/userspace-rcu-0.9.1 **
 =media-libs/libpng-1.6.27 ~arm64
 =net-analyzer/nmap-7.12 ~arm64
-=net-analyzer/tcpdump-4.7.4-r1 ~arm64
+=net-analyzer/tcpdump-4.9.0 ~arm64
 =net-firewall/ebtables-2.0.10.4-r1 ~arm64
 =net-firewall/ipset-6.29 ~arm64
 =net-libs/libmicrohttpd-0.9.50 **