How to reconstruct word document from pcap wireshark