#131 Fix for incorrect capture duration

I noticed that the capture duration was incorrect (off by one second) even after commit 971df14819, and traced it back to the C++ code not taking overflows into account when subtracting the two timestamps. I've changed the calculation to use timersub() and verified the results against Wireshark. Tested on Arch and macOS 10.12.