snoop_read_rec
if ((i = snoop_read_rec(&rec)) <= 0)
static int snoop_read_rec __P((struct snooppkt *));