Confused pcap incl_len and orig_len