Forgive me if this is old news. Luca Deri, author of ntop, has done quite a bit of work on this subject Ring Buffer Kernel patch: http://www.ntop.org/PF_RING.html Realtime IRQ Kernel patch http://home.t-online.de/home/Bernhard_Kuhn/rtirq/ -Jeff