tapsql: using struct iphdr and tcphdr