finish the simple sniffer

suport tcp