Updated TCPView V3.02

This major update to TCPView, a TCP/UDP endpoint viewing utility, adds endpoint send and receive statistics by leveraging ETW when TCPView is run with administrative rights. It also breaks ports and addresses into separate columns

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.

Download: http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx

Read More

Netmon - Not enough storage is available to process this command

Issue:
You might get an "Not enough storage is available to process this command" error message, when saving the Netmon capture file. 

Solution/Workaround:

1. Go to File, Frame Buffer Manager
2. Select the New File button
3. In file save dialog, type in a name and hit the save button.
4. Select all frames in frame summary (Ctrl+a)
5. Right click frames, choose Add Selected Frames -> Frame Buffer manager
6. Hit OK
7. Go to File, Frame Buffer Manager
8. Close the file

If the capture size is larger than 20megs, then it will be split into multiple files.  Then you can combine all these files using the NMCap utility. 

Here is the NMCAP command format:
NMCap /InputCapture My_Capture.cap My_Capture(1).cap My_Capture(2).cap /capture /file combined.cap:500M

Read More