tcp and (tcp[13] & 4 != 0)
