|The problem in #1 is, if you got a router without the possibility to mirror a port, you can use whatever program you want, e.g. wireshark or tcpdump or whatever, you will get only the broadcast traffic and the traffic of your own computer.|
Actually paulsep, with a port mirror on an L2 or L3 switch you would mirror the uplink port because it carries all traffic, just like the WAN port on a SOHO Router would.
If you mirrored a client port then all you would see is broadcast and traffic going to that client.
I never thought about a hub, but that should work. Good thinking. I think I've spent so much time advising people to use a switch instead of a hub I'd never stopped to consider they could actually have one use....and this is it.....lol
Put it between the WAN port and the modem so as to see all traffic going through the router.
It matters not how straight the gate,
How charged with punishments the scroll,
I am the master of my fate;
I am the captain of my soul.