using mainline pcap now