pcap is more fun
refactor with pcap