support low version of tcpdump