[ADD] analyze: split tcp processing