hopefully fixing find_ipv4_header

--ip.proto=tcp wasn't working because the trace didn't contain a vlan tag (and shouldn't need to). This fixes both the case when there isn't any tag and when they are stacked.