tcp checksum
simple sniffer