I'm not interested in snooping, certainly not on the ethernet level. I want to write a prototype for a special purpose DHCP server. Having the kernel push all ethernet (or all UDP) traffic into userland is not an option.

But I'll look at the reference.

Abigail