DF-3493 leak sample — raw sess_con pointer on the wire (from DF-3491 PADO captures)

round 1 (run.log, busy boot):  PADO offset 0x3a5: 01 04 00 08 e0 65 9e 8d 00 f8 ff ff
  -> AC-COOKIE (tag 0x0104, len 8) = 0xfffff8008d9e65e0

rounds 1-3 (run.2.log, next boot):
  [DF-3493] AC-COOKIE = raw kernel sess_con pointer 0xfffff8008d9e46f0   (x3 — same slab slot reused)

These are direct-map kernel virtual addresses of struct sess_con
(sys/netgraph/pppoe/ng_pppoe.c:143) embedded at:
  - ng_pppoe.c:829  (client PADI, PTT_HOST_UNIQ, broadcast)
  - ng_pppoe.c:1337 (server PADO, PTT_AC_COOKIE)