Tests for the transport-layer protocol differ based on whether the network-layer protocol is IPv4 or IPv6, regardless of the link-layer protocol. Therefore, we have to check for IPv4 and IPv6, even for DLT_RAW - do so by checking the version field in the header.