scan_net now only carves TCP structures if instructed to do so