$ apt install python3-jinja2 python3-pyelftools tcpdump
$ pip3 install --user git+https://github.com/larsks/dockerize
$ dockerize -t tcpdump:buster-amd64-latest /usr/sbin/tcpdump
$ podman diff $(podman image list -n localhost/tcpdump:buster-amd64-latest --format "{{.ID}}")
A /Dockerfile
A /etc
A /etc/group
A /etc/nsswitch.conf
A /etc/passwd
A /usr
A /usr/sbin
A /usr/sbin/tcpdump
$
reproducer: on debian buster: install podman from repository mentioned in https://podman.io/getting-started/installation in debian section.