I don't know whether any of the mechanisms used for packet capture will deliver packets in an order other than the order in which they are received by the network interface device or processed by the driver.
On a multiprocessor RedHat 9 Linux box with an SMP kernel, packet capture has been observed to return out-of-order timestamps, giving reason to believe that packets are being delivered to the application "in an order other than the order in which they are received by the network interface device or processed by the driver." So this is not a theoretical consideration.
@alex - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
