How do I perform a network trace using NetMon?

A. To start Network Monitor select "Network Monitor" fromthe "Network Analysis Tools" Start menu Programs folder. Once startedyou will be presented with the initial trace dialog which is split into 4 mainwindows.

Click here to view image

Initially the trace will be for all hosts to all hosts however you willprobably want to refine this using a filter as follows:

You are now ready to start the search by selecting Start from the Capturemenu (or click F10). Once you have collected the data you require stop thesearch by selecting Stop from the Capture menu (or click F11). An alternativeis to select Stop + View data which will stop the trace and show the captureddata.

The normal method to display captured data is to select "DisplayCaptured Data" from the Capture menu or click F12. A new dialog will beshown will all frames sent between the selected hosts. For more detail about aframe just double click it. It will then give the full frame information andcontent.

Click here to view image

Notice you can actually see the data that was sent and full IP and TCPheaders can also be inspected. If you start another search it will ask if youwant to save the current captured data. You can also manually save by selecting"Save As" from the File menu.