The software works by monitoring packets sent to and from the server. You have start and stop capturing to see these.
I would suggest you start by beginning a capture, ping something on your network, then stop the capture as quickly as possible - you'll be amazed at how much data tcp/ip shifts!
You will see a summary of what was captured, packet by packet (I am not at an NT box right now, so can't give you the exact details). You can then examine each packet. It has every detail including the particular protocol used (tcp/ip has several different protocols), and a very accurate detail of the time taken.
I suggest you start with a small capture just to get an idea if this data is of any use.