learning for libpcap