change return code + error msg for too small files (pcap)