sniff tcp packet, all in main, need reconstruct