changed missing pcap header threshold