I also did some analysis for my thesis: I log everything using the syslog function on a Linux system.

it shoul be simple: just send all the packets you receive and send to syslog. BUT you know thats gonna be a lot of data in a short time....