Questions tagged [netmon]

15 questions
57
votes
9 answers

Difference between SSL and Kerberos authentication?

I am trying to understand what's the actual difference between SSL and Kerberos authentications, and why sometimes I have both SSL traffic and Kerberos. Or does Kerberos use SSL in any way? Anyone could help? Thank you!
Layla
  • 4,175
  • 7
  • 26
  • 20
9
votes
4 answers

How to find out the HTTP header length of a packet?

I know how to do it manually (by looking at the hex dump). How can I obtain the same automatically? Do I have to use the APIs? I have both wireshark and Microsoft network monitor.
Bruce
  • 33,927
  • 76
  • 174
  • 262
3
votes
2 answers

Packet capture API - Wireshark or Microsoft Network Monitor?

I am wanting to write a C# service which runs on my server and monitors network traffic and writes it to a database for analysis. I have used Wireshark, but I think that Microsoft Network Monitor may have a better C# .NET interface for programming…
BrokeMyLegBiking
  • 5,898
  • 14
  • 51
  • 66
2
votes
0 answers

How to build WinPcap from source using VS2013

I downloaded the WinPcap sources 4.1.3 as well as the corresponding AirPcap developer kit. I followed the build instructions described from the WinPcap website 1: I loaded the project contained in the directory PacketNTx\dll\project with VS2013…
Jonas
  • 2,974
  • 4
  • 24
  • 23
1
vote
0 answers

How to restart network Interfaces on virtual machine instead of complete machine reboot/reset using pyvmomi API

I am working on a application which cloned virtual machines from a running machine on a specific event in poweredon state. The machines later communicate each other based on event and I have to fetch out (sniff) the network packets through netmon…
Shashank
  • 462
  • 1
  • 8
  • 26
1
vote
1 answer

why tcp is being displayed if channel is SSL secured?

I searched and found no answer for this so thought it is worth asking here. I have made my client-server(SQL Server) connection secured.It is working fine but whenever i am checking the data packets by using netmon tool i am seeing TCP protocols…
Nihal Kumar
  • 305
  • 3
  • 16
1
vote
0 answers

Microsoft Network Monitor 3.4 - Set wifi channel in Monitor Mode with WDK and NDIS

I'm writing a program (C++) which will detect devices around me using Wi-fi on Windows OS. In order to do that I'm using WDK and NDIS to switch the wireless network adapter to monitor mode in the following way: WlanSetInterface( . . .…
ilaif
  • 348
  • 2
  • 13
1
vote
1 answer

In Microsoft Network Monitor, how can I capture a single payload?

In Microsoft Network Monitor, I have a HTTP payload I want to capture that is not chunked, the data received is only 21K. How can I capture this data and save it to a file? EDIT: Also is it possible to drop all non-matched packets? EDIT: Why the…
chaz
  • 568
  • 1
  • 8
  • 22
0
votes
0 answers

Microsoft Message Analyzer decode NDIS ETW Provider Field data

How to decode Microsoft Message Analyzer NDIS ETW Provider Field data? This is my own local communication soft which send commands to my DB server, there are not using any encryptions, but why message is steal encoding?
Dmitrij Holkin
  • 1,995
  • 3
  • 39
  • 86
0
votes
1 answer

Can't track applications network communication under same machine

I have a network application environment of 7 applications communicating with eachother through UDP and TCP. All of them using either the machine's local network IP or 127.0.0.1 (localhost) to listen on ports or connecting to eachother. All these…
underthevoid
  • 513
  • 1
  • 6
  • 17
0
votes
1 answer

Does TLS sends a request sequentially ?

We currently have 2 environments TEST and PRODUCTION Recently when we set TLS on our TEST environment per this…
someguy
  • 995
  • 3
  • 11
  • 22
0
votes
1 answer

How to insert break or key sequence info powershell job

I am trying to run netmon on a series of machines, I am able to start netmon, which appears to be fine. However when I issue a Stop-Job * it appears that netmon is not closing correctly, which causes the packet capture to be useless. Netmon is…
james
  • 157
  • 1
  • 2
  • 11
0
votes
1 answer

MessageAnalyzer parse TLS on non-default 443 port

Message Analyzer seems to have no UI way to parse protocols on non-default ports. I have TLS server running on non standard port (not 443) and Message Analyzer won't parse captured as TLS.
Andrii
  • 2,402
  • 1
  • 19
  • 17
0
votes
1 answer

How to switch to monitor mode using NDIS?

I'm writing a program (C++) which will detect devices around me using Wi-fi on Windows OS. In order to do that I'm using Netmon API and I need to switch the wireless network adapter to monitor mode. I read that Netmon doesn't have an API for that…
0
votes
2 answers

Monitoring SQL Server Bandwidth

I think I can use NetMon to monitor traffic (b,kb,mb, gb) of my db (to/from) , however I dont know how to get a summary and breakdown of the traffic size. Has anyone used Netmon for this and can either explain how or point me in the right…
Coolcoder
  • 4,036
  • 6
  • 28
  • 35