Ethereal is a graphical sniffer, available for both UNIX (Gtk)
and Windows. Ethereal's SMB support is quite good. For details on the use of
the well-written Ethereal User Guide.
Figure38.1.Starting a Capture.
Listen for data on ports 137, 138, 139, and 445. For example, use the filter
port 137, port 138,
port 139, or port 445
as seen in
Starting a Capture snapshot.
A console version of ethereal is available as well and is called
Figure38.2.Main Ethereal Data Window.