Abstract: A DOCSIS 2.0 compatible sniffer which can receive legacy DOCSIS 1.x TDMA bursts as well as DOCSIS 2.0 SCDMA bursts. One embodiment uses two cable modems in the sniffer, one to capture downstream data bursts and the other to capture downstream messages and to recover the downstream symbol clock and generate an upstream reference clock which is phase coherent with the recovered downstream symbol clock. The reference clock is used by a cable modem termination system to capture upstream SCDMA DOCSIS 2.0 bursts. DOCSIS 1.x TDMA bursts may also be captured. Other embodiments use a DOCSIS 2.0 compatible modem in the sniffer to lock onto a downstream, register as a cable modem in the system and capture downstream messages in order to derive the correct timing to generate control signals to control burst capture circuitry in the sniffer to capture DOCSIS 1.x and 2.0 upstream bursts.