I like NGSSniff http://www.nextgenss.com/ngssniff.htm from Next Generation Security Software (David Litchfield's company).
It is free.
I tend to use this in Windows rather than Ethereal. Ethereal would be the 'standard" though, but you might want to give NGSSniff a try as well and see what you think.
__________________
perl -e 'print pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
|