move extraction of link type into own function
no need for snaplen to be transmitted as it is in the filter