net/pcap: move handler to process private