@aki, am not intending to go to the hard bits, all i want is to process the payload for "scapy" which is an elaborate module on packet processing and then have scapy deal with everything else on layer 2 and layer 3. Both tcpdump, scapy and the cousins pcapy and impacket all utilize the pcap library which is a "C" library and is well tuned.

in short am just using other peolple's work to pull this one.