I mostly develop network analysis software, and sometime I need to do some deep protocol analysis which is basically to reverse engineer a network protocols.
Currently, I am working with wireshark + 010 Editor.
Wireshark, is a good sniffer, but it has its flaws. for instance I wish it could show gzip session after extraction (it shows the decompressed data in the data bytes, but you can't see a connection flow, or search within the decompressed data).
I have no complains about 010 editor that I can think of, but if someone know about other tools (maybe automatic analysis) please let me know.