Tip of the Day: Have you still not met the successor to Microsoft Network Monitor?

By now you are probably aware that Message Analyzer is the replacement to good ol' Network Monitor.

But if you are like me and slow to change your ways, then you may not yet have made Message Analyzer your primary tool for capture gathering! 

That’s why this week's tips are geared at giving a MA test drive!

As you might guess from the name, Message Analyzer is much more than a network sniffer or packet tracing tool. Key capabilities include:

  • Integrated "live" event and message capture at various system levels and endpoints
  • Parsing and validation of protocol messages and sequences
  • Automatic parsing of event messages described by ETW manifests
  • Summarized grid display – top level is “operations”, (requests matched with responses)
  • User controlled "on the fly" grouping by message attributes
  • Ability to browse for logs of different types (.cap, .etl, .txt) and import them together
  • Automatic re-assembly and ability to render payloads
  • Ability to import text logs, parsing them into key element/value pairs
  • Support for “Trace Scenarios” (one or more message providers, filters, and views)


In the next tip we will look at steps required to grab a simple network capture. 

Download Message Analyzer 1.1

What are you waiting for?  Go ahead and kick the tires!

For more information check out the following Message Analyzer Blog link.

Meet the successor to Microsoft Network Monitor!

Comments (3)
  1. Busted. We post the tips internally at Microsoft first. Then we recycle them for our public facing blog. We try to weed out tips that contain dated information but sometimes they slip by us.

  2. Peter says:

    Are these posts scheduled extremely far in advance? They are already up to version 1.3

  3. Very nice, I had heard that the Network Monitor programmers were still actively working, this is super cool!

Comments are closed.

Skip to main content