wireshark log parsing + more hierarchy