>
> solves well.  That said, even if your x-GHz PC can capture full speed
> 100BT now, I would hope that you would realise that tis paper outlines
>
I do quite frequently tcpdump of streams around 1Gbit without lost packets
on a normal 2GHz Dell.  It must be preceded by an increase of bpf_bufsize
to 1MB something though (which I usually do with gdb on a live kernel).

-- Ragge