More pulling things out of pcap