get tcpdump data