improve pcap capture filter