I guess we may rename _udp, _tcp, ip, eth into eth_data, ip_data, tcp_data, udp_data so that it is clear if we are refering to a protocol or a parsed data