Packetbeat requirements using a SPAN interface