Update tcpdump / wireshark packet format writeup