So as soon as I came home, I grabbed a OS9 machine and a Leopard machine and my Linux laptop to act as hallway monitor.

Fired up Wireshark --- and......a TON of packets from my wife on the LAN, because she's doing homework. And it's too much to sort through. So I brought out a old dd-wrt router, and rinsed/repeated. This time I was able to capture the *entire* conversation between the OS9 TiBook and the Powerbook G4.

Here's the steps I followed:

-Went to chooser, typed in IP*

-Hit OK, got login prompt. Entered correct password, but invalid username (I could say I meant to do this, but I didn't lol)

-Mounted 'Macintosh HD' after successful login.

-Browsed the HD for a bit

-Dragged Appletalk-mounted HD to trash.

COnfirmed server disconnection, then stopped wireshark capture. The protocol itself is pretty straightforward. What i'm hoping is the pieces i'm seeing on the ethernet side (in ASCII) correspond to what I will eventually see on the serial-only side

SO the next step is to build a device that will listen to the serial bus and spit out what its saying.... then match them up.

*fingers crossed*