read from pcap file