remove reliance on pcap internals