I use Ethereal as well and it works great. I've only used it on Linux, so I can't vouch for the Windows version. If you want to get information about who is communicating with the box and what type of traffic there is, you could check out NTOP. NTOP doesn't, by default, dump the raw packet data, but it tracks coversations on the wire. That way, you can see actual TCP/IP sessions, including source and destination addresses, ports, protocol type, amount of data, etc. You need a little bit heftier box, mainly the NICs, for NTOP than you do for Ethereal. Good product still.