better icmp capture