today i saw http://rpcap.sourceforge.net/ on freshmeat
it's (from my reading) a compatible substitution for
libpcap.
Perhaps its possible to seperate the code thats needs
to run as root from the frontend. Also it should be
able to run the rpcap-server on a very low-end machine
running as router in many homes :)