first attempt for service definitions. various minor fixes. added warning for tcpdump mode.