I had a thought. the flow_dissector stuff already has a ton of stuff in it for breaking apart various frame types already, instead of specifying (at least some of these) options, we could inspect the traffic itself and set things more automagically?