On Sat, Sep 26, 2009 at 4:55 AM, Bartosz SKOWRON <getxsick at gmail.com> wrote: > descr = pcap_open_live("eth0", BUFSIZ, 0, 10000, errbuf); that 10000 value is obviously timeout_ms. forgot to mark it.