strip http headers from pcap file