pcap working read/write