Still more pulling things out of pcap