pcap: let netsniff-ng also record pkt timestamp source