You will need a device driver to support P mode, there is libpcap for *nix and win32, not sure if there is a version available for ME yet.

http://www.tcpdump.org/

cheers