Make transport layer return full packets to the tool, make tool return full decapsulated packets to the protocol.