Fix payload truncation by not double-counting IP header length