We've been playing with Wildpackets http://www.wildpackets.com/. They sniff
LAN to Gig and some WAN as well. The Distributed model is still vaporware,
but is said to be out soon. The expert analysis is comparable if not better
than NAI.
Mike Braun