1 / 30

What’s New in Network Monitor 3.4?

What’s New in Network Monitor 3.4?. User Interface Refresh. Parser Configuration Manager Column Management Color Rules Window Layouts Separate Capture Dialog “Live” Experts Alias Updates Fixed-Width Font. Parser Configuration Management. Multiple Parser Profiles Built During Install

sook
Download Presentation

What’s New in Network Monitor 3.4?

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. What’s New in Network Monitor 3.4?

  2. User Interface Refresh • Parser Configuration Manager • Column Management • Color Rules • Window Layouts • Separate Capture Dialog • “Live” Experts • Alias Updates • Fixed-Width Font

  3. Parser Configuration Management • Multiple Parser Profiles • Built During Install • Quickly Switch Between Parser Profiles • Ex: Locate traffic with Default Parser, switch to Windows for more detail.

  4. Parser Profiles Windows Performance Slow Default Fast HPC The more detail you get, the slower filtering and loading is. Pure Fast Shallow Complete Parsing Completeness

  5. Parser Profiles Create New Parser Profile to customize. Create from existing and automatically include “Network Monitor 3/Parser” directory You can also set Active Profile from Parser Profile Button The Default is the currently enabled profile

  6. Parser Profiles • A Parser Profile defines where Network Monitor goes to load parsers Directory List determines where parser files are loaded from. The first instance of an NPL file is discovered from walking this list.

  7. Parser Profiles • Other Parsers Available • SQL Browser • Office and OCS Be sure to check the following link for latest parser updates http://www.CodePlex.com/NMParsers

  8. Columns Management • Multiple, Selectable Column Layouts • All Layouts User Customizable • Includes HTTP and TCP Troubleshooter • Auto-Selected Based On Capture Type • See Time Zone UTC for more info

  9. Columns Management

  10. Columns Management • Original Add/Remove Column Unchanged • Columns Button Added • Remove Column by Right Clicking

  11. Columns Management • Column Layout Based on File Type • Applied to Frame Summary Window • All Layouts Can be Modified and Saved • Two Extra Layouts • HTTP Troubleshooter • TCP Troubleshooter

  12. Color Rules • Create via Right Click • Dropdown Button on Frame Summary Bar

  13. Color Rules Enable/Disable each rule Load, Save and Distribute Color Rules (.nmcf file) Priority is configurable, determined by order Append loaded rules to start or end

  14. Windows Layouts • Three Layouts • Each Customizable Simple Diagnostic Developer

  15. Separate Capture Dialog • Windows Moved for more Vertical Space • Combines Capture Filter/Network Selection • Capture Filter, Separate, Floating Window

  16. “Live Experts” • Experts now available with new Captures • Save a SnapShot before calling Expert

  17. Aliases Updates • Auto Applies with Right Click Create Alias • New Aliases Button

  18. Fixed Width Font Select this option to use fixed width font. Before: After:

  19. Other New Features • UTC Timestamps • High Resolution Time Stamp • Processing Tracking NMCap • High Performance Capturing • 802.11n WiFi and Raw IP Support • Driver Capture Location • API Driver Filtering • API Parser Profiles

  20. UTC Timestamps Event Viewer + Traces Sends a trace and event logs to be analyzed Trace Reviewer in LA Customer in NY NM3.3 trace would not match Event Viewer times, NM3.4 will. 11am PST 12pm MST 1pm CST 2 pm EST

  21. UTC Timestamps • Previously Time was Presented Locally • The Time the Capture was Taken • Unadjusted for the Trace Reviewer • Now “Time Date Local Adjusted” • Presents Time in the Reviewers Context. • Associate with other Time Adjusted Logs • You can revert back to old way!

  22. UTC Timestamps Time Date Local Adjusted column for traces taken with 3.4 Switching to NM 3.3 shows Local time column “Time of Day”

  23. UTC Timestamps Use File, Properties to determine capture file stats, including time zone information.

  24. High Resolution Time Stamp • Now Microsecond Precision NM3.3 NM3.4

  25. Processing Tracking in NMCap • Previously only Available in UI • NMCap Can Now Capture Process Info! • /CaptureProcesses to Enable

  26. High Performance Capturing Previous Behavior – 3.3 Capture File Frames Root Capture Parsed and Filtered Frames Back Up

  27. High Performance Capturing • Buffering to Disk adds Time and Requires Machine Resources • As Long as the Filter can Keep Up, Better To Filter Before we Write to Disk

  28. High Performance Capturing New Behavior – 3.4 We revert to buffering frames Once we catch up, return to High Perf If High Perf Filtering Can’t Keep Up Capture File Frames Root Capture Parsed and Filtered Throttle Only filters with predetermined fields. Fields are fully qualified. i.e Frame.Ethernet.Ipv4.Tcp.Port==8080 Standard Filters Available to Learn Parse and Filtered Using Optimized Parser

  29. Driver Capture Location • Place Driver at Top or Bottom of LWF Stack • Plays Better with other LWF Drivers • NLB • Network Emulation Tool (NEWT) • Configured with Registry Setting HKLM\System\CurrentControlSet\Services\nm3\LoadUpperLayers

  30. Network Monitor 3 Resources • Blog: Includes general help topics and training videos. • General Forums: For general questions about using Network Monitor, Parsing Language, and the API. • Parser Updates: We update approximately monthly, so check frequently for updates. • Experts: Experts perform analysis on trace data directly from the UI.

More Related