Network data stream
Network Monitor Monitor Network Data Streams, which consists of all information transmitted through the network through any given time. Information is divided by network software into smaller blocks before transmission, and these small pieces are referred to as frames or packets.
Frame, whether by broadcasting, multicast or direct transmission, composed of several different blocks, which can be individually analyzed. Some blocks contain data that network monitors can be used to answer network issues. For example, by checking the target address, it is possible to determine that the frame indicates a broadcast frame that all hosts must receive and processed or sent to the direct transmission frame of the specified host. By analyzing the frame, the exact cause of the frame can be determined, which helps to determine whether the service that produces such frame types can be optimized.
Capture network data
The process of the network monitor replication frame is called capture. You can capture all network communications sent to the local network or from the local network card, or set a capture filter to capture the subset of frames. You can also specify a series of conditions to trigger the network monitor capture the event of the filter. By using triggers, the network monitor can respond to events on the network. For example, you can initiate an executable when you detect a series of specific cases on your network monitor. After capturing the data, you can view it. Network Monitor has made many data analysis work by converting the original capture data into its logical frame structure.
Network monitor security
For security, the network monitor version in Windows 2000 captures only broadcasts and multicast frames, sent to or from the local computer. Network monitors are also broadcast frames, multi-broadcast frames, network usage, total bytes received per second, and all network segment statistics.
In addition, in order to protect your network to prevent people unauthorized installing the network monitor, the network monitor provides features that detect other network monitor installations that are running in the local network segment in the network.
Detect the installation of other network monitors
To prevent someone from monitoring your network, the network monitor can detect the installation of other network monitors running in the network in the network. To capture data on the network, the Network Monitor also detects all instances of the remotely used network monitor driver (or by a network monitor from the system management server, or through the system monitor).
When the network monitor detects other network monitors on the network, it displays the following information about these monitors:
Computer name
Name of the user logged in to this computer
The status of the network monitor on the remote computer (running, capture or transfer)
Remote computer adapter address
Version number of network monitor on remote computer
In some cases, your network structure may block a network monitor from installing to detect other network monitors. For example, if you are fully independent of a network monitor installed by a router that does not forward multicast, then your installed monitor cannot detect a monitor installed by a router.
Introduction to performance
Windows 2000 provides the following tools to monitor resource usage in your computer:
System monitor
Performance log and alert
The monitoring system performance is an important part of maintaining and managing Windows 2000 installation. Use performance data:
Understand the workload and the corresponding impact on system resources.
Observe the changes and trends of workload and resource usage to plan future upgrades.
Test configuration changes or other adjustments using monitoring results.
Diagnostic issues and target components and processes for optimization processing.
System Monitor and Performance Logs and Alerts provide detailed data about operating system specific components and designs for server programs for collecting performance data. Graphic display performance monitoring data, log provides data recording capabilities. When the counter value arrives, higher than or below the defined threshold, the alarm will inform the user through the "Implion Service".
Microsoft Technologies supports the results of performance monitoring frequently in problem diagnosis. Therefore, Microsoft recommends that you will monitor system performance as part of the daily management program.
