typ: ensure IP EthType when checking IPProtocol
typ: guard ip/tcp modifications

If IP fields are being modified, then the EthType better be 0x800. If
TCP fields are being modofied, then IPProtocol better be 0x06.