Adversarial Robustness of Traffic Classification under Resource Constraints: Input Structure Matters