Netmon - Microsoft's free network protocol analyzer details

Question

Microsoft Network Monitor is a free network protocol analyzer utility that runs on Windows, which allows you to view and capture network related protocol traffic.  In many cases, when you are posting questions on the Open Specifications support forums, a capture will be required if the on-the-wire packet behavior does not match the documentation.  At the very least, NM will help Microsoft protocol support team members quickly understand your request. 

Submitting a NM Capture:

You can gather traces and analyze the data using the latest version of NM.  Future versions of NM will include parsers for Windows Protocol Documents. The latest version of NM is available here:

http://go.microsoft.com/fwlink/?LinkID=103158&clcid=0x409

The latest Windows parsers are availalbe from CodePlex.  Where are also Office parsers availalbe on the download center.  Follow the link below for more information:

http://blogs.technet.com/b/netmon/p/downloads.aspx

Support for NM:

For questions about using Network Monitor, the API or the Parsers please visit our forums here:

http://social.technet.microsoft.com/Forums/en/netmon/threads

Our team also has a blog at http://blogs.technet.com/netmon/default.aspx, which contains helpful tips on filtering, capturing, and many other topics.

NM3 was designed with Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and future operating systems in mind.  For earlier operating systems, you can also use Wireshark (www.wireshark.org), or your favorite capture utility, as long as you can save in Netmon 2.x format or pcap version 2.4.

Answer 1

Paul,

Any sign of some of the WSPP parsers becoming public ?

Answer 2

 

Neil, we are working to release NM3.2 and we anticipate that the beta will be available next week on http://connect.microsoft.com under the Network Monitor Project.  And the great news is that we will include parsers for all the "Open Protocols".  So please keep your eye the connect site or on http://blogs.technet.com/netmon for information about the beta release. 

 

Thanks,

 

Paul

Answer 3

 Dear Friend,
            I dont know if this is a right place to post this question or not, But this was the closest forum related to my topic.
            One of my products use 'ClickOnce' deployment. Whenever I deploy any updates on the the server they get downloaded on the local machine. 
            Thoe, in the 'CLickOnce' documentation it says that ClickOnce will only donwlad the updates and not the entire application, its download interface displays the complete application getting donwloaded.
            So baiscally, I'm not able to understand exactly what amount of data is getting downloaded(ie..the size of the download). Someone suggested that NetMon is a great too for all network monitoring activities. But when I tried to run the monitor, I was able to capture the log & find out the download entry. But I was not able to understand where exactly can i find out how many kb's or Mb's of data got downloaded in the step.
            Perhaps you can direct me to some link where they have showen the loacation of the data I need. Or jolt down some steps on how to find out the amount of downloaded data.

Thanks and regards
Rohan W

Answer 4

Hi Rohan - The best place for you to get your questions related to Netmon answered is at the codeplex site below. 

http://www.codeplex.com/NMParsers/Thread/List.aspx


Please re-submit your question there.

Thanks - Chris