doc: add how-to on packet capture framework