One option would be to write a collector script which would then fork, for each packet received, an analyzer script which would take the packet, do stuff to it, then save stuff to a mysql DB. At that point, you can have whatever daemons you want look at that DB, irregardless of how that DB is populated.

I'm not fully conversant on how fork works, but I'm sure a number of people here are. Plus, you could just play with it. :)