On Wed, Mar 23, 2005 at 01:38:28PM -0500, cnelson@xxxxxxxxxxxx wrote: > Can I open a raw socket and get all traffic on an interface with > VLAN tags intact? Anything to get me started would be welcome. Use eth0. You could also check out libpcap which may be able to do most of the work for you. //Peter