simplify check in tcpdump activity