in reply to net::pcap performance
How long is "quite a long time" and how big is the file? Have you profiled the code?