NETMON Input Format Parameters

Log Parser

NETMON Input Format Parameters

The NETMON input format supports the following parameters:

fMode
  Values: TCPIP | TCPConn
  Default: TCPIP
  Description: Operation mode.
  Details: When this parameter is set to "TCPIP", the NETMON input format returns an input record for each TCP/IP packet found in the capture file. In this case, input records contain fields from the TCP and IP packet headers, together with the payload of each packet.
When this parameter is set to "TCPConn", the NETMON input format returns an input record for each TCP connection found in the capture file. In this case, input records contain fields calculated by aggregating all the TCP packets in the connection, including the reconstructed payload sent by both endpoints.
For more information on the different modes of operation, see NETMON Input Format Fields.
  Example: -fMode:TCPConn
 
binaryFormat
  Values: ASC | PRINT | HEX
  Default: ASC
  Description: Format of binary fields.
  Details: TCP packet payloads are returned as STRING values formatted according to the value specified for this parameter.
When this parameter is set to "ASC", data bytes belonging to the 0x20-0x7F range are returned as ASCII characters, while data bytes outside the range are returned as period (.) characters, as shown in the following example:
POST /test_system/request HTTP/1.1..Content-Length: 3411..Connection: Keep-Alive..
When this parameter is set to "PRINT", data bytes representing printable ASCII characters are returned as ASCII characters, while data bytes that do not represent printable ASCII characters are returned as period (.) characters, as shown in the following example:
POST /test_system/request HTTP/1.1
Content-Length: 3411
Connection: Keep-Alive
When this parameter is set to "HEX", all data bytes are returned as two-digit hexadecimal values, as shown in the following example:
504F5354202F63636D5F73797374656D2F7265717565737420485454502F312E310D0A
  Example: -binaryFormat:PRINT
 


© 2004 Microsoft Corporation. All rights reserved.