> through that he ran a packet sniffer like Microsoft Network Monitor or something?

The screen cap's look like it was Wireshark: http://www.wireshark.org/