I interpreted the Linux thing as just making the Linux host a better analysis tool, the main focus was the embedded system side. I would probably use Wireshark

I interpreted the Linux thing as just making the Linux host a better analysis tool, the main focus was the embedded system side. I would probably use Wireshark to find the packet timing, who knows what happens in something as complex an OS as Linux. You can also use something like Wireshark to extract debug payloads like ISR or DMA timing on the embedded system although admittedly a script on the LInux side is easier.