Network Monitor 3.2 is a protocol analyzer. It allows you to capture network traffic, view and analyze it.
One of the nice features of the Network Monitor, is that the packets are group per process.
Network Monitor 3.2 is available on Microsoft.com. The link is: http://www.microsoft.com/downloads/details.aspx?FamilyID=f4db40af-1e08-4a21-a26b-ec2f4dc4190d&DisplayLang=en.
New features in version 3.2:
- Process Tracking: Now you can identify rogue applications
sending network data! View all the processes on your machine generating
network traffic (process name and PID). Use the conversation tree to
view frames associated with each process.
- Capture engine re-architecture to improve capture rate in
high-speed networks. Network Monitor 3.2 drops significantly fewer
frames that Network Monitor 3.1.
- Find conversations: You asked for this. Many of our
users found conversation tracking to be difficult to use as the view
grew hard to manage, and it was difficult to correlate the frames they
were seeing with the conversation nodes in the tree. Now, you can
quickly isolate frames in the same network conversation. Just
right-click on a frame and select a conversation to track, and you will
see all the frames in that conversation. View TCP streams, HTTP flows
etc.
- Extensive parser set: Parsers for over 300 protocols! As before, the parsers are fully customizable.
- Better parser management: By default only a subset of
parsers are loaded. You can load the full parser set by going to
Tools>Options>Parser and choose Full vs. Stub implementations.
- CodePlex Ready: In the upcoming months, we plan to place
all our Windows parsers on the Microsoft open-source CodePlex site and
allow the community to modify and contribute parsers. You can find out
more information on this here. This version of Network Monitor
seamlessly integrates new parser packages.
- Network Monitor API: Create your own applications that capture, parse and analyze network traffic!
- More extensive documentation of the API and NPL. Access the documentation from Help > NPL and API Documentation.
- PCAP capture file support.
- ContainsBin Plug-in: Search frames for arbitrary byte sequences or strings.
From: http://blogs.technet.com/netmon/archive/2008/09/17/network-monitor-3-2-has-arrived.aspx