nflog check header done, couple of minor changes