Tools of the trade dept: wireshark and ratproxy

http://www.wireshark.org/ - network protocol analyzer
http://code.google.com/p/ratproxy/ - semi automated passive security audit tool (that's a mouthful)