Wireshark plus GUI (tightvncserver) on a 'plug? Wireshark is in the debian for armel repositories.
Well yes. I have actually tried it on one of my guruplugs to 'analyse' one of the ethernet ports.
It Works!!!! 
No indication of dropped packets. I havn't done anything serious with it at the mo but I suspect adding a filter will put a considerable load and I have yet to try it. However, it will help looking at suspect traffic or routing.
Doesn't help with Skype though, sigh!
