eth-capture: fiddle with header

- now timestamp:64 count:32 status:32 to keep timestamp dword aligned
- now at offset 0x30 to avoid gap between header and data