a sniffer,  take http session  to msgpack