Display Filter Reference: Network Monitor Process

Protocol field name: netmon_process

Versions: 2.6.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
netmon_process.command_line Commandline Character string 2.6.0 to 2.6.5
netmon_process.directory_table_base Directory table base Unsigned integer, 8 bytes 2.6.0 to 2.6.5
netmon_process.directory_table_base32 Directory table base Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.exit_status Exit status Signed integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.handle_count Handle count Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.image_file_name Image file name Character string 2.6.0 to 2.6.5
netmon_process.page_directory_base Page directory base Unsigned integer, 8 bytes 2.6.0 to 2.6.5
netmon_process.page_fault_count Page fault count Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.pagefile_usage Pagefile usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.parent_id Parent ID Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.peak_page_file_usage Peak page file usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.peak_virtual_size Peak virtual size Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.peak_working_set_size Peak working set size Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.private_page_count Private page count Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.process_id Process ID Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.process_user_sid.invalid Invalid SID Label 2.6.0 to 2.6.5
netmon_process.quota_non_paged_pool_usage Quota nonpaged pool usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.quota_paged_pool_usage Quota paged pool usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.quota_peak_non_paged_pool_usage Quota peak non-paged pool usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.quota_peak_paged_pool_usage Quota peak paged pool usage Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.reserved Reserved Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.session_id Session ID Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.unique_process_key Unique process key Unsigned integer, 8 bytes 2.6.0 to 2.6.5
netmon_process.unknown Unknown Sequence of bytes 2.6.0 to 2.6.5
netmon_process.user_sid.authority User SID Authority Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.user_sid.id User SID Identifier Authority Sequence of bytes 2.6.0 to 2.6.5
netmon_process.user_sid.revision User SID Revision Unsigned integer, 1 byte 2.6.0 to 2.6.5
netmon_process.user_sid.subauth_count User SID Subauth count Unsigned integer, 1 byte 2.6.0 to 2.6.5
netmon_process.virtual_size Virtual size Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netmon_process.workingset_size Working set size Unsigned integer, 4 bytes 2.6.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More