diff --git a/cve_bin_tool/checkers/tcpdump.py b/cve_bin_tool/checkers/tcpdump.py
index 9e74c20d86..e11a84aeaa 100644
--- a/cve_bin_tool/checkers/tcpdump.py
+++ b/cve_bin_tool/checkers/tcpdump.py
@@ -19,6 +19,6 @@ class TcpdumpChecker(Checker):
     # lookup_{emem,protoid} are static functions provided by tcpdump in addrtoname.c
     VERSION_PATTERNS = [
         r"tcpdump-([0-9]+\.[0-9]+\.[0-9]+)",
-        r"([0-9]+\.[0-9]+\.[0-9]+)\r?\n[0-9a-f]*lookup_",
+        r"([0-9]+\.[0-9]+\.[0-9]+)\r?\n[0-9a-f]*lookup_(?:emem|protoid)",
     ]
     VENDOR_PRODUCT = [("tcpdump", "tcpdump")]
diff --git a/test/test_data/qemu.py b/test/test_data/qemu.py
index 9b4cb72eba..1862c31ea8 100644
--- a/test/test_data/qemu.py
+++ b/test/test_data/qemu.py
@@ -14,7 +14,7 @@
         "package_name": "qemu-0.9.1-1.el3.rf.x86_64.rpm",
         "product": "qemu",
         "version": "0.9.1",
-        "other_products": ["gcc", "tcpdump"],
+        "other_products": ["gcc"],
     },
     {
         "url": "http://ftp.fr.debian.org/debian/pool/main/q/qemu/",