move clock_read_us() to utils.c
pcap: add a custom decision stage for tests/pcap