My hunch is that Net::Pcap::open_live returns a ref of some sort, and its not threads::shared. In order to assign a ref to a shared variable, the ref must point to a shared variable.

So you're pretty much screwed unless you write your own threaded version of Net::Pcap.