Hi, I need to analyse some traffic that occurs during windows xp machine startup and network authentication. I figured that the easiest way to do that would be to use another machine as a gateway (with 2 network cards) to sit between the machine I need to analyze and the network. I have never done anything like this though, so is there a write up about this some place? Basically, I would like no intervention from the gateway machine, so that it would be transparent(or as close to transparent as possible, so as not to change anyhting) to the machine I need to observe and the network environment.

Would I just do internet connection sharing on the middle box? Or is there a better way? and is there a way to avoid the machine that I am observing from having a NAT (translated address)?

Thanks,
RMSe17