> If he's going to be doing local processing of pcap(4) data into some

pcap(3), of course, is what I meant >:}