If you make regular use of Netmon you will probably want to know that Microsoft has released a beta of Netmon 3.2 to connect.
Netmon Connect Site
Here is what is new according to the site:
Process Tracking: View all the processes on your machine generating network traffic (process name and PID). Use the conversation tree to view frames associated with each process.
§ Find conversations: Quickly isolate frames in the same network conversation. Isolate TCP streams, HTTP flows etc.
§ PCAP capture file support*
§ Capture engine re-architecture to improve capture rate in high-speed networks. Network Monitor 3.2 drops significantly fewer frames that NM 3.1
§ Extensive parser set: Parsers for over 300 protocols! Parsers for the protocols covered by the Windows Open Protocol Specifications (see http://msdn.microsoft.com/en-us/library/cc216517.aspx).
§ NM API: Create your own applications that capture, parser and analyze network traffic!
§ Better parser management: By default only a subset of parsers are loaded. You can load the full parser set by changing the parser search order in Tools>Options>Parser
§ Support for frame truncation. Go to Tools>Options and limit the number of bytes captured per frame to improve performance.
§ More extensive documentation of the NPL which includes documentation on the new NMAPI. Access the documentation from Help > NPL and API Documentation
§ Enhanced filtering on items within NPL while loops or arrays. You can specify an index into the array or while loop to filter on
§ IA64 version now available.
§ ContainsBin Plug-in: Search frames for arbitrary byte sequences or strings. For example, ContainsBin(FrameData, ASCII, “msn”).
§ More UI indications of conversation status, dropped frames and the number of frames in the capture buffer.
§ … and more. See our Release Notes in the NM3.2 installation directory for a complete list of new features and known issues with the Beta.
Enjoy!
The Network Monitor Team
Posted
Jun 12 2008, 09:40 AM
by
Josh Phillips
Follow Me on Twitter
Did you enjoy this article? If yes, then subscribe to our

or