I use Wildpackets Etherpeek. (www.wildpackets.com) It's got everything inc log to disk, packet decoders, packet inspectors and the ability to modify a packet and resend it on the network. If you are worried about rogue programs I also use NetScan Pro from www.7forces.com to log ports that are opened on my PC.
Christian
