split out wireshark as separate process from kvm implemented fork_if_active (for sub-processes) and fork_actions which can be run without dependencies