BTW,

a google search on ruby packet sniffer came up with this:
http://arstechnica.com/articles/columns/linux/linux-20051002.ars

which in turn led to this:
http://www.goto.info.waseda.ac.jp/~fukusima/ruby/pcap/doc/index.html

-- 
Rick DeNatale

My blog on Ruby
http://talklikeaduck.denhaven2.com/