Don't accept incomplete TCP headers when extracting flows in kernel.