"More recently" (since 2003 or so), we use myseq which can run all on your windows desktop.
It now works by reading spawn data from the running everquest application, instead of looking at network traffic.
I still use it sometimes, but
a) modern macroquest has built in spawn tracker
b) server don't send loot data to clients so we cannot sneak preview it anyway