Windows Server 2008 Portable Command Guide: MCTS 70-640, 70-642, 70-643, and MCITP 70-646, 70-647

Chapter 30. Using Network Monitor and nmcap

This chapter provides information and commands concerning the following topics:

• Installing Network Monitor

• Starting and using Network Monitor

• Using nmcap to capture traffic

• Automatically starting, stopping, and terminating nmcap

• Adding filters to nmcap

• Enabling promiscuous mode in nmcap

Tip

You should be familiar with Network Monitor and nmcap when preparing for the 70-642 exam.

Installing Network Monitor

Network Monitor is a free protocol analyzer, or network sniffer, available from Microsoft. It is used to capture and analyze network traffic. At the time of writing this, the current version is 3.4. You can download and install it on Windows Server 2008 or Windows Server 2008 R2 with ...