Network Monitor 3.2 has arrived!

Microsoft Network Monitor 3.2 verfuegbar

Forefront & Security Blogs — Wed, 17 Sep 2008 18:38:30 GMT

Wie bereits angekündigt, befand sich die aktuelle Version des Microsoft Netzwerkmonitor seit Juni in

Netmon 3.2 Has Released

Yuri Diogenes's Blog — Wed, 17 Sep 2008 21:03:55 GMT

The latest build for Netmon is not available for download. I strongly recommend you to download this

Microsoft Network Monitor 3.2 ja 対応に感謝

barlog — Mon, 22 Sep 2008 14:26:17 GMT

最近ご無沙汰で何気に寂しかった ;) 親愛なるマメン ( my men ) X-WORKS さんが先日ようやくパブリック公開となったネットワークキャプチャ NM...

Microsoft News Summary w/e 21st September 2008

BlogMS - Official Microsoft Team Blogs — Tue, 23 Sep 2008 11:17:59 GMT

There were 214 articles from the Microsoft Team Blogs and feeds last week. Here is my summary of interesting

Nový Network Monitor 3.2 k dispozici!

TechNet Blog CZ/SK — Wed, 24 Sep 2008 11:04:28 GMT

Kdo používáte oblíbený Network Monitor, možná jste zaregistrovali, že je dostupná nová verze s označením

New Network Monitor Version Available

Full of I.T. — Wed, 24 Sep 2008 17:34:14 GMT

If you’re into troubleshooting network traffic, and are a real “packet-head”, then this news is for you..

re: Network Monitor 3.2 has arrived!

frnkblk@hotmail.com — Wed, 01 Oct 2008 19:54:39 GMT

The addition of process identification is nice, but I'm trying to troubleshoot the source of some "rogue" DNS queries and none of them are showing up....when I use Process Explorer they pop up very briefly.

Is this a weakness in the current incarnation of Netmon?

re: Network Monitor 3.2 has arrived!

PaulELong — Wed, 08 Oct 2008 05:09:00 GMT

NM3.2 will poll the current state of processes when it detects UDP or TCP traffic that has not been associated. It's possible a process has disappeared by the time we query the state.

We do some caching and the timing may be further tunable, but there may be some situations where we miss the process because it is no longer around when we query the state.

I'll have to play around with DNS in general, but I think there should be some situations where it does capture DNS traffic to a process.

Paul

re: Network Monitor 3.2 has arrived!

Aidar — Sun, 19 Oct 2008 22:09:38 GMT

Does the Process Tracking feature of NM 3.2 allow to somehow measure the total network traffic of particular process (both incoming and outgoing) and/or particular conversation within process? For example, to display how much network traffic was consumed by iexplore.exe or outlook.exe processes on the screenshot in the blog post…

re: Network Monitor 3.2 has arrived!

lexknuther — Tue, 21 Oct 2008 22:45:33 GMT

Do you have a list of NDIS 6 802.11 drivers that support monitor mode? Also, have you noticed that the Intel 4965AGN adds 4 bytes to the end each received frame?

re: Network Monitor 3.2 has arrived!

PaulELong — Thu, 23 Oct 2008 20:22:52 GMT

There's no built in way to get total network traffic. You could, however, add a column for Frame length, then filter on the process in question, then export that data to Excel and add up the total data sent.

You would also be able to modify the NPL to add a property to show the total length if you wanted to. You'd have to do this in IPv4 or IPv6 and create a conversation variable to hold the value. But you could then add this as a column. Due to the way properties work, the column would have the total ammount.

Paul

re: Network Monitor 3.2 has arrived!

PaulELong — Thu, 23 Oct 2008 20:52:17 GMT

Basically it's based on a driver that passes WLK certification. I beleive the latest driver from Intel has worked properly for me.

Look at this blog for more info http://blogs.technet.com/netmon/archive/2007/06/15/wireless-capturing-with-network-monitor-3-1.aspx

re: why can't install the program...

zeusseo — Thu, 30 Oct 2008 08:12:22 GMT

when i try to install network monitor 3.2,

the install program killed automatically.

but 3.1 version installed very well.

please send me a anwser...

why can't install the program...

zeusseo — Thu, 30 Oct 2008 08:13:49 GMT

when i try to install network monitor 3.2,

the install program killed automatically.

but 3.1 version installed very well.

please send me a anwser...

zeusseo@gmail.com

re: Network Monitor 3.2 has arrived!

PaulELong — Thu, 30 Oct 2008 16:55:14 GMT

The forums on http://connect.microsoft.com is probably a better place to discuss these types of problems, but I will send you some email to try and t-shoot this.

You can start by extracting the files and running the netmon setup with logging.

netmon.msi /l*v mylogfile.txt

Paul

Новая версия Network Monitor 3.2

Илья Сазонов — Fri, 31 Oct 2008 11:05:59 GMT

Что-то я пропустил выход новой версии анализатора протоколов от Microsoft Network Monitor 3.2...

re: Network Monitor 3.2 has arrived!

PaulELong — Fri, 31 Oct 2008 17:57:40 GMT

Новая версия, can you write your question in English? I tried to translate your question. It said that you missed out on the new version.

Are you saying that a feature is missing?

Are you saying that you weren't notified of a new update from Microsoft Update?

Paul

Network Monitor 3.2 has released

Erwin's Blog — Wed, 05 Nov 2008 22:56:11 GMT

Network Monitor 3.2 is a protocol analyzer. It allows you to capture network traffic, view and analyze

re: Network Monitor 3.2 has arrived!

GrahamS — Thu, 08 Jan 2009 14:46:08 GMT

Hi,

Is there a forum somewhere with support for netmon3.2 ??. Been using Netmon2 for YEARS and recently found 3.2 :-O.

I now have a large capture (7 x 20MB tmp files) and it won't let me save the capture :-((.

Keeps saying 'Not enough storage is available to process this command'.

Running on a hosted server 2003 web edition and have 1GB RAM and 30GB free space on drive with tmp files in :-O.

Thanks

Graham

re: Network Monitor 3.2 has arrived!

PaulELong — Thu, 08 Jan 2009 20:33:41 GMT

The support forums are currently on Microsoft Connects (https://connect.microsoft.com/community/discussion/richui/default.aspx?SiteID=216)

To answer your question, the UI is not ideal for capturing for a long time. Use of UI elements for conversations and other things pile up over time and given enough traffic or a long enough period you may get in a situation where you can't save the trace.

For long running traces, use the command line utility instead, NMCap, which is included with NM3.2 when you install. Type NMCap /examples for some different ways to run NMCap.

Thanks,

Paul

re: Network Monitor 3.2 has arrived!

Mark00000 — Wed, 14 Jan 2009 12:04:07 GMT

Hey Guys.

What happened to the "Graph" pane that had all the information such as network utilisation, bits per second etc.

Why do I ask? Well, I have a project where I am supposed to conduct capacity analysis using Network Monitor 3.2.

However, with this new version, there does not appear to be a way to actually measure the bits associated with the captured traffic. So, I cant see how I could for instance measure average network utilisation.

I am pretty sure the older lite version that came bundled with Server 2003 had this ability, as seen in this link here:

http://technet.microsoft.com/en-us/library/cc767907.aspx

So in summary, does this recent version of Network Monitor allow for quantitative measurements as opposed to just qualitative ones?

Thanks

re: Network Monitor 3.2 has arrived!

PaulELong — Wed, 14 Jan 2009 18:05:13 GMT

When we rewrote NM3, we didn't include the summrized information containing throughput and such.

With the API, it should be possible to recalculate this information and create a separate app that does this, but at this point something like this doens't exist in NM3.

You could also export your data to Excel, using Cut&Paste, and create something that calculates the data there.

Paul

Hey, Scripting Guy! How Do I Check Host Name Records?

Hey, Scripting Guy! — Sat, 06 Jun 2009 00:15:25 GMT

Hey, Scripting Guy! We are having name resolution issues at work. It is so bad that when my wife calls