Free packet sniffing software for windows

Packet Garden application captures information about how you use the internet and uses this stored information to grow a private world you can later explore.
To do this, Packet Garden takes note of all the servers you visit, their geographical location and the kinds of data you access. Uploads make hills and downloads valleys, their location determined by numbers taken from internet address itself.
The size of each hill or valley is based on how much data is sent or received. Plants are also grown for each protocol detected by the software; if you visit a website, an HTTP plant is grown. If you share some files via eMule, a Peer to Peer plant is grown, and so on.
None of this information is made public or shared in any way, instead its used to grow a personal landscape, a kind of walk-in graph uniquely shaped by the way you use the internet.
With each day of network activity a new world can be generated, each of which are stored as tiny files for you to browse, compare and visit as time goes by. You can think of packet gardens as pages from a network diary.

daSniff is an open source customizable sniffer for win32 systems daSniff is an open source customizable sniffer for win32 systems. daSniff helps you to log your LAN traffic by specifying packet rules as filters. daSniff has two major versions named version A and version B. Both versions use the same packet filtering, but different sniffing code.
NOTE: Version A uses pure WinSock2 API and runs only under Windows 2000 and above with administrator privileges. It is also available as a Windows NT service. Version B uses WinPcap as a packet capture library and runs under Windows 95/98/ME/2000/XP.

Incoming Packet Monitor is a packet monitor designed to monitor SYN packets. Machines receive SYN packets when a remote machine is trying to initiate a TCP connection.
When a machine is listening on a port, it replies the machine sending the SYN packet with an aknowledgement ( ACK ) request. If the machine is not listening on a particular port, then the machine will reply with a reset ( RST ) request.
Many crackers use the SYN scan technique to detect open ports. This helps the crackers easily detect the services running on a machine.
Incoming is a utility designed to closely monitor the SYN packets being received by a machine. This can be of great help to machines that act as servers on the internet, or machines that are directly connected to the internet through a broadband connection.
Main features:
Passive fingerprinting
- Incoming packet monitor can detect the operating system of remote machines, without generating any packet.
- Other fingerprinting software generates tons of packets in order to detect the operating of machines.
Find the country of remote machines
- Incoming packet monitor can detect the country of origin of a packet, in real-time. Now you can easily monitor incoming connections to your machine and the country from which the connection was made.
Map the remote machine on a map, down to city level
- If you want even more information, you can track the IP address down to city level. Incoming packet monitor can now plot the remote machine on a map.
- Now, you can actually see the city of origin of a packet.
Detect whether a machine is behind a firewall or a NAT router
- Now you can easily find out whether the remote machine is behind a NAT router or behind a firewall.
- NAT detection is really helpful for system admin who want to detect users who are sharing there internet connection using a NAT router or Windows Internet Connection Sharing (ICS).
Logging
- You can now log all incoming connections to a file. This can be really helpful when you want monitor illegal connection attempts to your server.
Very fast and low on resources
- Kushinara Incoming is extremely fast. You can run the program, without worrying about memory or CPU consumption.
Unicode compliant
- Every component of Kushinara Incoming is fully Unicode compliant. The user interface of Kushinara Incoming is available in multiple languages.