After years of using the old outdated Microsoft network monitor when I was forced to on windows (ethereal and wireshark are better tools by far), I found the microsoft network monitor blog. I downloaded and tried the new version 3.3 (3.4 is in beta). Wow, what an improvement. The capture and display filters actually work like one would expect!
Some of the predefined filters are a nice touch (smtp for example).
I still prefer to have a linux host around with tcpdump and wireshark though for serious traffic monitoring and debugging.
Excellent read, I just passed this onto a colleague who was doing a little research on that. And he actually bought me lunch because I found this for him smile. So let me rephrase that: Thanks for lunch!