One of the tools recommended in Chris Sander’s Practical Packet Analysis book is called Rumint.
Rumint is a free, open source packet visualization tool available for Microsoft Windows (written in Visual Basic.)
Roomint’s author, Greg Conti, has a book to be published by No Starch Press called Security Data Visualization.
One problem I’ve run into with Rumint is that it doesn’t work on my setup. I run Windows XP and I’ve got WinPCap 4.0.1. It looks to me like a problem between Rumint and the latest version of WinPCap. The problem is that Rumint won’t show any network interfaces to sniff, so obviously things don’t work too well. 
Popularity: 20% [?]
Related posts:
{ 1 trackback }
{ 2 comments… read them below or add one }
I just updated Rumint (v2.14) with a new network interface library, it should now work fine with WinPcap 4.01. The updated version is available at http://www.rumint.org. Thanks. Greg
@Greg: that’s great…I will check it out and report back. Thanks!