>This IP accounting box is currently just another node on the switch...
>so it's NOT the main "default gateway" for all the servers that we host.
your first problem is that you are on a switch. The switch learns the MAC
address of the devices on each port and segments the traffic (I didn't use
the word "route" as this implies IP routing).
One solution is to use a small hub between the switch and your gateway
(placing the Linux box on that hub as well), then you can sniff this segment
(as you say, you don't want the linux box to be a point of failure)
Ian.
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug