Network Monitor 3.2 is out

Freshly out of the Microsoft Connect beta, Network Monitor 3.2 is now available for download. Here are some of the new features:

  • Process Tracking: Now you can identify rogue applications sending network data! View all the processes on your machine generating network traffic (process name and PID). Use the conversation tree to view frames associated with each process.
  • Capture engine re-architecture to improve capture rate in high-speed networks. Network Monitor 3.2 is now supposed to drop significantly fewer frames that Network Monitor 3.1.
  • Find conversations. Many users found conversation tracking to be difficult to use as the view grew hard to manage, and it was difficult to correlate the frames they were seeing with the conversation nodes in the tree. Now, you can quickly isolate frames in the same network conversation. Just right-click on a frame and select a conversation to track, and you will see all the frames in that conversation. You can view TCP streams, HTTP flows etc.
  • Extensive parser set: Parsers for over 300 protocols! As before, the parsers are fully customizable.
  • Better parser management: By default only a subset of parsers are loaded. You can load the full parser set by going to Tools>Options>Parser and choose Full vs. Stub implementations.
  • Network Monitor API, and extensive documentation of both the API and NPL: You can create your own applications that capture, parse and analyze network traffic!
  • And much more… You can check the Release Notes in the Help directory of the installation folder for a complete list of new features and known issues.