sniffing is provided using socket instead of pcap lib