I just rediscovered the Ethereal network protocol analyzer. I was trying to track down a problem using the tcptrace proxy which is a nice simple little tool when it works. I’m not quite sure what the problem was, but I was seeing different behavior when I was using the proxy than when I wasn’t, so I went for the full blown driver level sniffing that Ethereal provides. It’s based on the work of the WinPCap organization. I’ll let you know why I was sniffing network packets in my next post.