s3: rename "len"->"next", according to wireshark