>CAP is a principally user-mode implementation, and uses the user-level
>interfaces to grab packets off the wire (NIT, etc).
>
>NetAtalk is more integrated kernel-mode version of AppleTalk (DDP in
>Kernel). It performs lots better. However, it hasn't been beaten on as long
>as CAP.

And, of course, NetATalk tends to be harder to port (because it is a more 
integrated kernel-mode version...)

---
Joshua P. Dady (jpd@ed.dwmp.com)