flow: Verify that tot_len >= ip_len in miniflow_extract().