[Guy Harris <guy@xxxxxxxxxxxx>]

On Apr 26, 2009, at 11:23 AM, Guy Harris wrote:

> dev_queue_xmit_nit() is called before the device's hard_start_xmit
> routine is called.  That probably means the packet is handed to
> libpcap at about the time that it's transmitted.

Or, more precisely, at the time the driver gets told to transmit it.   
That is, of course, not necessarily the time the hardware actually  
puts the packet on the {wire,air}.