changes to pcap writing (no includes udp) and some additional fields added to other transforms