modify pcap filter