Network Monitor Conversation Filtering

Network Monitor Conversation Filtering

Data Fields:

We will consider Conversation members as properties because data fields represent data on the wire for a frame.

Properties:

To avoid name collisions, each field should be prefaced by "Conversation.".  To save space, we've left this out in the Field column.


Property Description Example
ProcessName The process associated with the current frame.  This is collected when Network Monitor 3.4 is used to capture a trace.  If using NMCAP, you need to add the /CaptureProcesses.
ProcessName.Contains("iexpl")
ProcessID The process ID associated with the current frame.  This is collected when Network Monitor 3.4 is used to capture a trace.  If using NMCAP, you need to add the /CaptureProcesses.
ProcessID == 1234

Return to the List of Top Level Protocols

Network Monitor Blog

Leave a Comment
  • Please add 7 and 7 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
Page 1 of 1 (1 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Maheshkumar S Tiwari edited Revision 3. Comment: Added tags

Page 1 of 1 (1 items)