NetworkMiner

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows (but also works on Linux / Mac OS X / FreeBSD ). NetworkMiner can be used as a passive network sniffer and packet capture tool to detect operating systems, sessions, host names and open ports. The free edition of the program is capable of live sniffing (eavesdropping), parsing PCAP files, Pcap-over-IP extraction, and OS fingerprinting, which is done using databases from Safari and the p0f tool used specifically for fingerprinting. The parsing speed of PCAP files is 0.83 MB/s.