If the cable you normally have is a crossover, it should be marked as such. Did you make it yourself in days gone by? Sometimes they are printed on the cable "crossover" or they have a special colored band on each end near the connector. You can also put the two ends together and compare the wire color order (the end should be clear). If they are in the same order, then it is normal (straight thru, if several seem mixed up, then it is a crossover.
I don't see why your setup with the hub or switch wouldn't work. Probably a hub is better since all ports receive the same messages. Then you need to put a PC with Linux in there on the hub, with at least one network card in promiscuous mode. Google that and you will find out how to do it. There are then several tools that you can use to sniff. Snort, ethereal, snarf, etc., Google TCP/IP traffic sniffing.
One thing I just thought of. The packets coming in to the router may be in chunks like frames. Your standard PC NIC may not be able to decode them. I reserve the right to be wrong and admit it in an open forum. You have some research ahead of you anyway.
On 6/2/05, Kelsay, Brian - Kansas City, MO brian.kelsay@kcc.usda.gov wrote:
yes, that is, AIUI, why the Cisco refers to that port as a "serial interface" and I'm not going to stick the wire in my hub. Thanks everyone!
-
David Nicol -
Kelsay, Brian - Kansas City, MO