Network Monitor 3.2 Beta has released!!!

I’m excited to announce that the Network Monitor 3.2 Beta has released. There are some exiting new features listed below of which many I have already spoken about in this blog:

https://blogs.technet.com/netmon/archive/2007/12/28/santa-s-bag-was-full.aspx

One feature I didn’t mention is our new capture buffer to avoid dropping frames. After adding our drop frames counter, we found out under certain busy situations it would go above zero and we just couldn’t have that. We now buffer the frames before parsing and displaying them. While this does add some complexities to capturing, it insures that packets are more reliably captured which is obviously very important. I will blog about this feature specifically, but I wanted to call it out here.

Where are the bits?

As usual we are hosting our beta at https://connect.microsoft.com under the Network Monitor 3 Project. If you are already signed up, you should have it listed on the main page. If not, look for the project and join up with us to help us find bugs. There is also a web page forum front end to our newsgroup if you need to get support or ask general questions.

What’s New since Netmon 3.1

  • Process Tracking: View all the processes on your machine generating network traffic (process name and PID).  Use the conversation tree to view frames associated with each process.

  • Find conversations:  Quickly isolate frames in the same network conversation.  Isolate TCP streams, HTTP flows etc.

  • PCAP capture file support
  • Capture engine re-architecture to improve capture rate in high-speed networks.   Network Monitor 3.2 drops significantly fewer frames that NM3.1
  • Extensive parser set:  Parsers for over 300 protocols!  Parsers for the protocols covered by the Windows Open Protocol Specifications (see https://msdn.microsoft.com/en-us/library/cc216517.aspx).
  • NM API: Create your own applications that capture, parser and analyze network traffic!
  • Better parser management:  By default only a subset of parsers are loaded.  You can load the full parser set by changing the parser search order in Tools>Options>Parser
  • Support for frame truncation.  Go to Tools>Options and limit the number of bytes captured per frame to improve performance.
  • More extensive documentation of the NPL which includes documentation on the new NMAPI.  Access the documentation from Help > NPL and API Documentation
  • Enhanced filtering on items within NPL while loops or arrays.  You can specify an index into the array or while loop to filter on
  • IA64 version now available.
  • ContainsBin Plug-in:  Search frames for arbitrary byte sequences or strings. For example, ContainsBin(FrameData, ASCII, “msn”).
  • More UI indications of conversation status, dropped frames and the number of frames in the capture buffer.

  • … and more.  See our Release Notes in the NM3.2 installation directory for a complete list of new features and known issues with the Beta.

Enjoy!

The Network Monitor Team

Comments

  • Anonymous
    January 01, 2003
    Our friends over at the Network Monitor Blog have information on how to get the beta for Netmon 3.2. 

  • Anonymous
    January 01, 2003
    Can you send me email using the link on left side of the page and include your email?  I think we can resolve this more easily by direct email. Thanks, Paul

  • Anonymous
    January 01, 2003
    Well... I come to https://connect.microsoft.com/directory/ and cannot find Network Monitor Connection. When I'm trying to search through directory for Network monitor I receive several links which say "Page Not Found". Is it OK?

  • Anonymous
    January 01, 2003
    Für ein vernünftiges Troubleshooting ist er inzwischen unverzichtbar: Der Microsoft Network Monitor.

  • Anonymous
    January 01, 2003
    http://blogs.technet.com/netmon/archive/2008/06/12/network-monitor-3-2-beta-has-released.aspx

  • Anonymous
    January 01, 2003
    Sorry if i bother you but.. can't see that connection I'm a Windows Live Butterfly and this is not the first time i see that.. MSFT ppl fix something and then we can see that missed connection. Hope u double check that

  • Anonymous
    January 01, 2003
    thanks

  • Anonymous
    January 01, 2003
    Just seen on the Network Monitor blog that the beta of NetMon 3.2 is now available. It’s available on

  • Anonymous
    January 01, 2003
    Ok, then i can't test it What about this ? "If not, look for the project and join up with us to help us find bugs"

  • Anonymous
    January 01, 2003
    To follow up on finding the project on Connect.  There are two reason you may not see the project.  Either you are not signed in as a member, or you have signed in and at some point in the past declined the invitation. If the second problem has happened to you, and it was not intentional, then you can send mail to the site and request that you be reactivated for that project.

  • Anonymous
    January 01, 2003
    I'm not sure I'm following you.  However, I've fixed the text above.  If you are already joined in the project, then you can access the project from your dashboard.  Then you can download the NM3.2 Beta. If you are not joined in the project, then you must join first and once you do you'll have access.  They've changed the page a bit, but you can now go to "Connection Directory" then search for "Network Monitor 3".  You should see an entry. Thanks

  • Anonymous
    January 01, 2003
    I'm not sure I'm following you.  However, I've fixed the text above.  If you are already joined in the project, then you can access the project from your dashboard.  Then you can download the NM3.2 Beta. If you are not joined in the project, then you must join first and once you do you'll have access.  They've changed the page a bit, but you can now go to "Connection Directory" then search for "Network Monitor 3".  You should see an entry. Thanks

  • Anonymous
    January 01, 2003
    I has look up NM API for several days, and does anyone can tell me where is the document? Or does anyone know how to capture REAL wireless data packets (not fake ethernet packets), including management frame and data frame? I know not all of wireless driver provide monitor mode, but if the wireless driver does, how can I sniffer them?

  • Anonymous
    January 01, 2003
    Just seen on the Network Monitor blog that the beta of NetMon 3.2 is now available. It’s available on

  • Anonymous
    January 01, 2003
    thanks

  • Anonymous
    January 01, 2003
    I want to download it to test but can't see the "Microsoft Network Monitor Project" on Connect

  • Anonymous
    January 01, 2003
    thanks

  • Anonymous
    January 01, 2003
    Can you send me email using the link on left side of the page and include your email?  I think we can resolve this more easily by direct email. Thanks, Paul

  • Anonymous
    January 01, 2003
    thanks

  • Anonymous
    January 01, 2003
    thanks

  • Anonymous
    January 01, 2003
    If you cannot find the project listing, then perhaps you opted out.  In any case please send feedback to the Connect Admins from the Help menu (upper right hand corner). They should be able to re-enlist you if that's what the original problem was.

  • Anonymous
    January 01, 2003
    The project name is actually Network Monitor 3.  If you are already joined in the project, then it will show on your dashboard but it will not show up in the list.

  • Anonymous
    January 01, 2003
    If you go to the help menu, choose "NPL and API documention" Unfortuantely we have not added the ability to capture wireless management packets with the API yet.  We'll have to extend teh API to do this in future versions. Thanks, Paul

  • Anonymous
    January 01, 2003
    thanks