cls_flow: add sanity check for the packet length