Did the latest Centos4.x kernel break the ability to tcpdump with any amount of traffic? Machines that used to be able to keep up now show a few packets and stop - if you hit ^C they take a minute or so to do anything, then show something like:
54 packets captured 18188 packets received by filter 18070 packets dropped by kernel
Before recent updates I almost never saw packets 'dropped by kernel'.