Previous Page | Next Page

  1. Introduction
  2. Windows 2000 Professional
  3. Windows 2000 Server
  4. Windows 2000 Advanced Server
  5. Windows 2000 Datacenter Server
  6. Application Support
  7. System Operation
  8. Disks and Volumes
  9. Filesystems
  10. Configuration Files
  11. Security
  12. Network Support
  13. Access Management
  14. Processes
  15. AD Structure
  16. AD Objects
  17. AD Object Naming
  18. AD Schema
  19. AD Sites
  20. Domains
  21. AD Functions
  22. AD Replication
  23. DNS
  24. AD Security
  25. AD Installation
  26. AD Configuration
  27. AD Performance
  28. Installation
  29. Installation Options
  30. Unattended Installation
  31. Software Distribution
  32. Remote Installation Service
  33. Language
  34. Accessibility
  35. File Attributes
  37. Distributed File System
  38. Control Panel
  39. Active Directory Tools
  40. Computer Management Console Tools
  41. MMC Tools
  42. Network Tools
  43. Network Monitor
  44. System Performance Monitoring
  45. Tools
  46. Managing Services
  47. Connections
  48. TCP/IP
  49. DHCP
  50. Printing
  51. Routing
  52. IPSec
  53. ICS
  54. Fault Tolerance
  55. Backup
  56. System Failure
  57. Services
  58. Remote Access
  59. WINS
  60. IIS
  61. Certificate Server
  62. Terminal Services
  63. Web Services
  64. Authentication
  65. Accounts
  66. Permissions
  67. Groups
  68. User Rights and Auditing
  69. Auditing
  70. User Profiles
  71. Policies
  72. Group Policies
  73. Miscellaneous
  74. Terms
  75. Credits

Windows 2000 Network Monitor

It is installed from the Network applet in control panel using the "Add/Remove Programs" applet. It is listed in "windows Components", Management and Monitoring Tools", and "Network Monitor". This is not a fully functional network monitor. The tool that ships with SMS, a separate purchase, is fully functional. Network Monitor can:

  • Capture frames coming from or going to the server
  • Capture broadcast or multicasts.

This tool does not set the network card in promiscuous mode. It can be invoked from administrative tools after the install. Also there is a control panel applet installed for this tool. This tool can also detect other copies of Network Monitor running on other domain computers and what users are running it. Display sections include:

  • Bar graphs - Network activity real time information. Graphs include network utilization, broadcasts per second, bytes per second, and frames per second.
  • Session statistics - Sessions between this computer and others.
  • Station Statistics - Includes frames sent and received, bytes sent and received,multicasts sent, directed frames sent, broadcasts sent, and network address.
  • Summary (Total) statistics - Summation of captured statistics, network statistics, MAC statistics, MAC errors, and per second statistics.

Captured data is saved in the default directory \WINNT_ROOT\system32\netmon\captures. A filter on the Monitor can be established to collect the frames you want. Filtering may be done based on:

  • Protocol
  • Address
  • Protocol Properties

To see other users using Network Monitor, select "Identify Network Monitor Users" while in the Network Monitor program.

Network Monitor is installed from the control panel network applet services tab. It is "Network Monitor Tools, Agent". Once installed, there is a "Network Monitor" applet in the control panel where the password for the Network Monitor program may be set or changed. A program called "Network Monitor" is added to administrative tools.

Network Monitoring Agent Installation?

When installed the following is added:

  • Control Panel : Monitoring Agent
  • Administrative Tools: Network Monitor.

Monitoring agent has the following characteristics:

  • Dual level password.
  • Detection of other NT or SMS monitors.

Network Monitor Menu selections

  • File
  • Capture
    • Start
    • Stop
    • Stop and View
    • Pause
    • Continue
    • Display Captured Data - Displays captured frames stored in the network buffer.
    • find All Names
    • Clear Statistics
    • Addresses
    • Buffer Settings
    • Filter - Set up filtring for capturing packets. This allows packets with specific characteristics to be captured.
    • Networks
    • Trigger
    • Dedicated Capture Mode
    • Save Configuration
  • Tools
    • Identify Network Monitor Users - Will show other computer's names that are running network monitor along with the user name, MAC address, network monitor state (running, capturing, or transmitting), and network monitor version.
  • Options
  • window

Monitoring Agent?

The monitoring agent selected from the control panel. This agent allows specification of both a display and a capture password. This way some users may be allowed to capture data and others may display it.