Archiving this blog post on my blog as sadly it looks like NextHop is going. February 15, 2012, All Lync Server 2010 client traffic is encrypted by default and secure by design. In fact, you can’t run the Lync Server client in TCP mode, it must run in TLS. Security is essential, but it can pose a challenge when you are troubleshooting an issue, or just trying to better understand your...
Microsoft have released Network Monitor Parsers for Lync download them here
You can download Microsoft Network Monitor 3.4 here
I found I also needed the parser filters from codeplex to get the Lync parsers to install, you can get them here
I must admit, I’m usually a wireshark guy. Here are some useful links to get you started with Netmon.