Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

Monday, November 23, 2009 10:34 PM

No Frames Captured Due to Disk Quota

In certain instances, you start a capture and no frames are captured. Or perhaps the UI suddenly stops displaying new frames. The display doesn't indicate any dropped frames and you've already verified that your selected adapter is the one that should
Posted by PaulELong | 0 Comments
Monday, November 16, 2009 7:34 PM

When You Can't Save Frames From the UI

You might have run into an occasion when doing a capture from the UI that you are unable to save your capture. You might receive a message like "Not enough storage is available to process this command". The UI tends eat up a lot of resources
Posted by PaulELong | 0 Comments
Friday, October 23, 2009 10:35 PM

Adapters Are Missing After Upgrading to Windows 7

If you have just upgraded to Windows 7, you might notice that you no longer see any adapters listed in your Select Networks selection. There is a very simple way to fix this problem. First run CMD as administrator. If you have not done this before, you
Posted by PaulELong | 0 Comments
Monday, October 12, 2009 7:00 PM

Reassembling Packets with the Network Monitor API

Network traffic by nature is fragmented. Limits of various network packet sizes force protocols to chop up data into multiple frames. When you capture data or read it from a trace with the API (NMAPI) you see only the fragments by default. But as the
Posted by PaulELong | 0 Comments
Filed under:
Monday, October 12, 2009 12:19 PM

Network Monitor Videos on Channel 9

We posted some videos to Channel 9   in the last 6 months or so, and I wanted to let everybody know about them. We have one set of video's that provide some insight into the Network Monitor API and process of creating experts. This series provides
Posted by PaulELong | 0 Comments
Wednesday, October 07, 2009 2:31 PM

Using NMAPI to Access TCP Payload

The TCP Payload often carries data that you want to access directly using the Network Monitor API. Below I will detail how to do this using a simple C++ example and the NMAPI. Why Not add a TCP.Payload Field? The TCP Payload can carry all types of payloads
Posted by PaulELong | 0 Comments
Tuesday, September 22, 2009 3:10 PM

SMB Opportunistic Locking Behavior

Behold the mysterious world of OpLocks (Opportunistic Locking). Often OpLocks will be disabled by a user or system administrator in order to help address a performance problem. And this practice might not always be the best course of action. Understanding
Posted by PaulELong | 0 Comments
Monday, September 21, 2009 4:01 PM

Delayed Write Failure Trace Study

In this "Trace Study”, we'll look at a case where the customer is seeing delayed write failures logged in the event log. Delayed write failures are reported when a file being written over the network is inaccessible for a time. Based on a trace taken
Posted by PaulELong | 0 Comments
Wednesday, September 09, 2009 3:49 PM

Chained Captures and Stitching Them Back Together

When you use NMCap to capture data you have an option to save the capture files as a chain. As the current capture file format has a limited size, this option allows you to continually capture the data in successive files. This also gives you some flexibility
Posted by PaulELong | 0 Comments
Friday, August 14, 2009 9:00 PM

I Can't View My Windows Home Server at Home

I have a friend who just received his Windows Home Server. Home Server allows you to access it remotely so you can share photos, Remote Desktop and backup documents. The provided documentation includes details on how to setup your router, open ports,
Posted by PaulELong | 1 Comments
Wednesday, July 22, 2009 5:32 PM

SMB Data Fields and Properties

property.SMBFileID - The File ID for any kind of SMB request property.SMBFileID==0x4000
Posted by PaulELong | 0 Comments
Monday, July 20, 2009 5:34 PM

TCP Data Fields and Properties

TCP.Port - Filters on the Source or Destination port. Used to find traffic based on port which is often associated with an application. TCP.Port==80 // filters on the default port for HTTP traffi. Property.TCPRetransmit - A property that is set when a
Posted by PaulELong | 0 Comments
Tuesday, June 30, 2009 10:24 PM

TCP Analyzer Expert: Make Your Network Run Faster

Performance problems suck...time! But years of "Where's Waldo" has trained our brains in preparation for this moment. The TCP Analyzer expert, available from our Experts Download Page[ http://go.microsoft.com/fwlink/?LinkID=133950] takes advantage
Posted by PaulELong | 0 Comments
Tuesday, June 30, 2009 3:03 PM

Network Monitor Fields and Properties

Collected here are a list of the most common data fields and properties. They are categorized by protocol. This list is helpful for getting an idea of the most common data fields and properties with descriptions of what they do. The list will continue
Posted by PaulELong | 0 Comments
Filed under: ,
Thursday, June 25, 2009 8:42 PM

Circling In Shark Waters

Last week I attended Sharkfest 09 at Stanford CA and I had a wonderful time. It was great to talk to other network geeks like me to better understand this community and see how various tools can be used to illuminate the cloaked world that is your network.
Posted by PaulELong | 0 Comments
More Posts Next page »
 
Page view tracker