fix cipherSuite0 byte in sniffer, so ECC is recognised correctly.