On Mon, Jun 14, 2004 at 10:15:14AM -0700, Julian Elischer wrote: > don't forget that bpf is not copying the entire packet, just the > header.. If you look at Sergey's benchmark.c, you will see that the snaplen was set to 32KB. BMS