Fix capturing initial SYN/ACK TLS packets