Article ID: 224834
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows NT Server 3.5
- Microsoft Windows NT Server 3.51
- Microsoft Windows NT Server 4.0 Standard Edition
This article was previously published under Q224834
SUMMARY
This article describes how to set a capture filter to view only browser frames in Network Monitor.
MORE INFORMATION
When you are troubleshooting browsing-related problems, a network trace may help. Because browser traffic is somewhat infrequent, however, the trace may need to run for an extended period of time to gather enough data for analysis. Some browser information is sent only every 15 minutes, making it difficult to capture those packets. Depending on network usage, a Network Monitor trace can quickly become very large (many megabytes).
You can configure Network Monitor to capture only browser frames by using a pattern match to identify these frames. This significantly reduces the size of the capture. To set a capture filter in Network Monitor to capture only browser packets:
- On the Capture menu, click Filter.
- Double-click Pattern Matches.
- In the Offset box, type cb. Click From Start of Frame.
- In the Pattern box, type 4252. Click Hex.
- Click OK.
- Click OK.
- Start the capture.
For more information about using Network Monitor, see the Network Monitor Help file in the "Systems Management Server Administrator's Guide."
Additional query words: browse netmon master 8021 8003 8032 event browstat browmon
Keywords: kbinfo kbnetwork KB224834
