added further checks for pcapng (e.g. ebp capture len)