Tcpdump-3 4-ascii diff malware