hardware


passive fiber monitoring
optical splitter
collection on interface cards 
non-intrusive, no performance impact 

ocXmon (mci)
atm aal5, oc3, oc12 -> oc48
subsets of packets: 1,2,3,last,all cells

other related implementations
ds3mon, other ocNmon, "tcpdump"