Windows 2000 server has one that lots of users under estimate the power. Network Monitor. This can do just the same as Ethereal, and we use this also, but first the client computer need the service added on there computer, Network properties, add network monitor. Then run Network monitor on the server, add the users computer names to the address book, and start the monitor, when done, go to stop and view, you can see the same stuff as ethereal. You better brush up on your network skills, this will tell you a lot!
P.S. We got a hold of Trial run of Sniffer, and loaded it on our network, this told us a lot, but again was cut shot to find it did the same thing a Network monitor, just in a better GUI form!!!
I hope this Helps
Lead, Follow, or get out of the way
USAF