add docs and pcap code