fix bug in sniffer when using old client hellos where large hello message may
be ignored