have the program determine if network compression or the presence of some other middlebox inspecting, or modifying packets is likely
Probably use the dime difference as a %
-maybe add another commandline option to set the sensitivity of the estimation