pcap_io: add cooked mode support