Various ideas:

- online processing
- decoding SOCKS
- data type recognition ?
- count extra data between IP end and eth end
- dump HTTP transaction to files