Introducing the next version of Message Analyzer which includes highly requested features like “Goto (Ctrl+G)” and “Find Conversation/Follow the Stream” along with the “Conversation Tree” from Network Monitor. Plus there’s a ton of smaller fixes and performance improvements.
Updates and Features
Grouping Viewer – Enables you to group and summarize messages by different fields. Selecting a group in this viewer will either select messages or filter messages in all other viewers in the same session, depending on the mode you select on the Home tab ribbon. The default View Layout organizes network traffic by addresses and ports, allowing you to quickly drill into specific network conversations and filter the traffic for all other views in the same session. You can quickly find associated traffic in the Grouping viewer by right-clicking messages in the Analysis Grid (aka “follow the stream”), so you can analyze related grouped messages.
Go To Message (Ctrl+G) – Allows you to go to a message by entering a message number in the Go To Message dialog. If you have a single data source loaded, the first message in that source that matches your entry will be found. When there is more than one data source loaded you can select a specific data source in which to search for a message, or you can search across all sources.
Fiddler .SAZ – Now you can open .SAZ files from Fiddler directly. Now correlate fiddler traffic with network traces, ETL’s and log files.
Viewpoint Improvements – Viewpoint has been separated as a separate tool, to centralize it’s functionality in one place, including the hiding of Operations. Now a View Filter before Viewpoints, so that you can drill down with a filter, change your Viewpoint, and still see all the data based on the high-level View Filter. You can also apply a new Viewpoint Filter that is relative to the currently applied Viewpoint, which works like the previous view filter behavior.
Session improvements – Enables you to identify traces from the same session based on a common color cue. A new filter icon () in viewer tab and Session Explorer tells you when a filter is applied to a view, and a tooltip lets you understand the difference between two views.
GZIP decompression – Message Analyzer can now automatically decompress HTTP payloads that have been compressed using GZIP.
Decryption Improvements – Support for TLS decrypted protocols like RDP, TDS and LDAP. Also we’ve improved some of the error messages reported by the Decryption tool window.
Parser and Text Log Updates – New protocol parsers like SRVS, RDWR, WSH, EVEN, and many more. Updates to the Netlogon parser and the addition log file parsers for Lync, SCCM (System Center Configuration Manager), ULS (SharePoint), and VMM (Virtual Machine Manager) logs.
Selection Tool Window Improvements – Enables you to improve message correlation and analysis capabilities, by using a separate space that independently monitors and displays message selection in multiple viewers and builds a selection collection for back- and forward-navigating among messages as necessary, while maintaining the context of the last selected message. You can undo any message selection that you made accidentally during analysis, without affecting the message collection. You can also select various Column Layouts that expose different message fields. In addition, you can change modes to diversify the scope of message selection, for example to track message selection in:
- A single data viewer in a session.
- Across multiple data viewers in the same session.
- Across multiple data viewers in different sessions.
New Preview Features – Enable the following new preview features on the Features tab of the Options dialog, restart Message Analyzer, and then try them out:
- Message Summary Tiles Viewer — Summarizes important data for live or saved traces, by displaying a high-level overview of major trace statistics and important values that you can examine at-a-glance to obtain a quick top-level analysis of results.
- Azure Table Import — Provide an Azure account name, access key, and table name in the Message Analyzer UI and retrieve data stored in an Azure Table. Display your Azure data as rows of messages and add Azure table properties as column fields in the Analysis Grid data viewer for filtering and other analysis.
Try It Out
You can now upgrade from previous versions, the only caveat is that we do reset your window layout, but that shouldn’t take long to restore assuming you did any customization in the first place. We wanted to make sure users discovered some important tools, like the Message Stack, so we decided on this trade off. Please give it a spin, and use the feedback buttons ( ) in the UI for casual feedback and simple issues and the Message Analyzer forums for more involved support and investigation.
For additional details about some of the concepts described in this article, see the following topics in the Message Analyzer Operating Guide on TechNet: