If i understand right, wlan0 would have the active internet connection then i would bring down eth0 and bridge with
brctl addbr br0
brctl addif br0 wlan0
brctl addif br0 eth0
From there, br0 would have all the packets routed through it and could be treated as a normal network interface for monitoring and such?
p.s. Thanks for all the help, i started watching hak 5 when rev3 picked them up, and the Forum has been really responsive and helpful