Back in my college days, Packet sniffing on Ethernet LAN was suppose to be the easiest task in programming, using socket domain as PF_PACKET.
This old simple trick is of no use when we are dealing with heavy traffic.