I checked the binary of the received packet, on UDP the data is extracted from the packet itself while on TCP it is taken from the connection info (s.ip, s.port, d.ip, d.port) Maybe with UDP, it uses hep module while with TCP, it uses sipcapture module?