dag-pcap was not correctly handling ERF records with extension headers.

It was subtracting the extension header count from caplen after reducing it to packet_len, resulting in truncated records.