add followtcpstream() function