I believe his question is if you're trying to find out what / where headers are being added to specific packets.
Ethereal is the one I recommend, it's more efficient and can help you identify certain kinds of traffic almost instantly. Plus it's color oriented organization, for us lazy people.