Sniffer Prove of concepts of capturing packages using PF_PACKET with mmap. It provides the end user an interface which could monitor multiple device at once. Reference Capture Ethernet frames using an AF_PACKET ring buffer in C kernel Documentation