Microsoft Network Monitor is a free network protocol analyzer utility that runs on Windows, which allows you to view and capture network related protocol
traffic. In many cases, when you are posting questions on the Open Specifications support forums, a capture will be required if the on-the-wire packet behavior does not match the documentation. At the very least, NM will help Microsoft protocol
support team members quickly understand your request.
Submitting a NM
You can gather traces and analyze the data using the latest version of NM. Future versions of NM will include parsers for Windows Protocol Documents.
The latest version of NM is available here:
NM3 was designed with Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and future operating systems in mind. For earlier
operating systems, you can also use Wireshark (www.wireshark.org), or your favorite capture utility,
as long as you can save in Netmon 2.x format or pcap version 2.4.