fill_tuple
fill_tuple(&tuple, iph, iphlen, tcp->source, tcp->dest);
fill_tuple(&tuple, iph, iphlen, udph->source, udph->dest);
tuplen = fill_tuple(&tuple, info->hdr, info->len, tcp.source, tcp.dest);
tuplen = fill_tuple(&tuple, info->hdr, info->len, udph.source, udph.dest);