Skip to main content
Service phase: Beta

This service is still in development. Give us your feedback.

Format

Microsoft Network Monitor Packet Capture

Summary

Name
Microsoft Network Monitor Packet Capture
Version
2
Identifiers
PUID: fmt/778
Description
Microsoft Network Monitor is a packet analyser used to examine and interpret network traffic.
File extensions
cap
Submitted by
Digital Preservation Department / The National Archives
Developed by
Microsoft Corporation
Supported by
Microsoft Corporation

Internal signatures

Netmon Capture 2

Description
GMBU - minor version number - major version number
Provenance
https://msdn.microsoft.com/en-us/library/windows/desktop/ee817717(v=vs.85).aspx

Byte sequences

Min Frag Length
Absolute from BOF
Offset
0
Max offset
0
Byte Sequence
474D4255{1}02
Endianness
None

Changelog

  • V83

    Release date
    17 December 2015
    • Added format

      Microsoft Network Monitor Packet Capture 2: Full entry added.

    • Added signature

      Microsoft Network Monitor Packet Capture 2: Signature developed through PRONOM Research.