Previous Page | Next Page

  1. Introduction
  2. Installation
  3. Hardware Issues
  4. Filesystems
  5. Networking
  6. Security
  7. Servers
  8. Services
  9. Utilities
  10. Control Panel
  11. Printing
  12. Performance Monitor
  13. Network Monitor
  14. Event Viewer
  15. Other Issues
  16. User Accounts
  17. Groups
  18. Policies
  19. User Rights
  20. Auditing
  21. System Policies
  22. Sharing
  23. Profiles
  24. Roaming Profiles
  25. Domains
  26. Server Management
  27. Directory Replication
  28. License Management
  29. Client Administrator
  30. Netware Tools
  31. Macintosh Support
  32. RAS Server
  33. SNMP
  34. DHCP
  35. DNS
  36. WINS
  37. Mail Service
  38. Internet
  39. Internet Information Server
  40. Routing and Firewalls
  41. Items to Remember
  42. Terms
  43. Credits

Windows NT Network Monitor

It is installed from the Network applet in control panel using the services tab. The service is called "Network Monitor Tools and Agent". This is not a fully functional network monitor. The tool that ships with SMS, a separate purchase, is fully functional. Network Monitor can:

  • Capture frames coming from or going to the server
  • Capture broadcast or multicasts.

This tool does not set the network card in promiscuous mode. It can be invoked from administrative tools after the install. Also there is a control panel applet installed for this tool. This tool can also detect other copies of Network Monitor running on other domain computers and what users are running it. Display sections include:

  • Bar graphs - Network activity real time information. Graphs include network utilization, broadcasts per second, bytes per second, and frames per second.
  • Session statistics - Sessions between this computer and others.
  • Station Statistics - Includes frames sent and received, bytes sent and received,multicasts sent, directed frames sent, broadcasts sent, and network address.
  • Summary statistics - Summation of captured statistics, network statistics, MAC statistics, MAC errors,, and per second statistics.

Frame detail Screen:

  • Summary Pane - Top. Lists time, source and destination MAC address, and the transmission protocol.
  • Detail Pane - Middle. Gives protocol information
  • Hex Pane - Bottom. Shows hex values associated with the currently selected frame.

Captured data is saved in the default directory \WINNT_ROOT\system32\netmon\captures. A filter on the Monitor can be established to collect the frames you want. Filtering may be done based on:

  • Protocol
  • Address
  • Protocol Properties

To see other users using Network Monitor, select "Identify Network Monitor Users" while in the Network Monitor program.

Network Monitor is installed from the control panel network applet services tab. It is "Network Monitor Tools, Agent". Once installed, there is a "Network Monitor" applet in the control panel where the password for the Network Monitor program may be set or changed. A program called "Network Monitor" is added to administrative tools.

Network Monitoring Agent Installation

When installed the following is added:

  • Control Panel : Monitoring Agent
  • Administrative Tools: Network Monitor.

Monitoring agent has the following characteristics:

  • Dual level password.
  • Detection of other NT or SMS monitors.

Network Monitor Menu selections

  • File
  • Capture
    • Start
    • Stop
    • Stop and View
    • Pause
    • Continue
    • Display Captured Data - Displays captured frames stored in the network buffer.
    • find All Names
    • Clear Statistics
    • Addresses
    • Buffer Settings
    • Filter
    • Networks
    • Trigger
    • Dedicated Capture Mode
    • Save Configuration
  • Tools
    • Identify Network Monitor Users - Will show other computer's names that are running network monitor along with the user name, MAC address, network monitor state (running, capturing, or transmitting), and network monitor version.
  • Options
  • window

Monitoring Agent

The monitoring agent selected from the control panel. This agent allows specification of both a display and a capture password. This way some users may be allowed to capture data and others may display it.