less: fix pcap detection