collect stats with tcpdump