it turns out the wccp header is optional
authordlg <dlg@openbsd.org>
Fri, 9 Feb 2018 00:06:51 +0000 (00:06 +0000)
committerdlg <dlg@openbsd.org>
Fri, 9 Feb 2018 00:06:51 +0000 (00:06 +0000)
commit15e54ab478bf0f179159b4dd4f4d2527ab526f58
tree4beaeb099ae1f61f9bbcac09b1a9d72b30981c2c
parentbd2af7a7bf4637d85e90cc1a1d1cda5a2cb45bcb
it turns out the wccp header is optional

peek inside the payload to see if the first nibble looks like ipv4.
if it isnt ipv4 assume it is the wccp header.
usr.sbin/tcpdump/print-gre.c