In handle_arp_snat() and snat_pre_route() pull enough payload into the headers.