I can try to see if I can move it - I remember creating the global because storing the data in the tcp argument where I was originally using the data (teardown) was causing the program to crash on large pcaps. It seemed like there was too much data or something, because the same data works fine with this approach.