What does tcpdump think of your packet ?
> My impression is SOCK_PACKET doesn't work
> the way I assume it should.
It outputs raw packets - it literally ships what you ask out of the interface
> Again, why SOCK_PACKET and not SOCK_RAW ?
SOCK_RAW requires you have the interface configured for IP