checked for proper reading of pcap packet header (legacy pcap)