pcap version non-empty: true