Posted by: kurtsh | September 26, 2012

BETA: Microsoft Message Analyzer – the successor to Network Monitor

Any Network Monitor fans out there?

imageMicrosoft Message Analyzer has been released to the public, available here:
(you’ll have to join the Message Analyzer and Network Monitor program to see the downloads and access other parts of or our site.)

As you might guess from the name, Message Analyzer is much more than a network sniffer or packet tracing tool. Key capabilities include:

  • Integrated "live" event and message capture at various system levels and endpoints
  • Parsing and validation of protocol messages and sequences
  • Automatic parsing of event messages described by ETW manifests
  • Summarized grid display – top level is “operations”, (requests matched with responses)
  • User controlled "on the fly" grouping by message attributes
  • Ability to browse for logs of different types (.cap, .etl, .txt) and import them together
  • Automatic re-assembly and ability to render payloads
  • Ability to import text logs, parsing them into key element/value pairs
  • Support for “Trace Scenarios” (one or more message providers, filters, and views)

We are providing this beta release to give you an opportunity to let us know what you like and don’t like and where we need to focus our energy as we drive towards a mid-2013 RTM date.

Please install, take it for a spin, and send us your thoughts! There are “Report Issue” and “Community” buttons built into the ribbon, and we have a new blog here:

(To capture at the NDIS and Firewall layers without running as admin, you must log off and back on after installation to pick up the necessary credentials. Please do this!)

Have a ball!

Taken from:


%d bloggers like this: