tcpdump + node + database