Thanks.I was thinking to use RAW SOCKETS instead of tcpdump, but decided to leave it for futher releases.