replace tcpdump with tshark for calculating traffic