darkstat's own code doesn't open /proc/net/dev, and it only calls select (not poll) - something else is doing those things, possibly libpcap.
The 500ms delay is because of how Linux libpcap worked pre-2009 (the timeouts are much longer on e.g. FreeBSD) - this should probably be revisited.
