ehea: Access iph->tot_len with correct endianness