Linux packet analysis