I am using qemu 2.2.0 with e1000 as my default eth i/f. I want to trap data packets from/to e1000 without using tap i/f. Downstream packets i am able to get with 'e1000_send_packet'. However, i am not able to inject packet back to the nic without tap. Can someone point me to how can i do that ?