v3: fix parsing SYN_REPLY