- System Process: Yes
- Background Process: Yes
- Application Process:No
- Common Path:
C:\ Program Files\ Microsoft Network Monitor\ netmon.exe
- Uses Network:Yes
- Uses Internet:Yes
The netmon.exe process is a network diagnostic tool that monitors local area networks and provides a graphical display of network statistics. With the help of the netmon.exe process, the Network administrators can use the given statistics to do routine trouble-shooting tasks, such as locating a server that is down, or receiving a disproportionate number of work requests. While collecting information from a network's data stream, the file netmon.exe displays the source address of the computer in the form of a unique hexadecimal or in base-16 number that identifies the specific computer on the network.
The netmon.exe file can locate the destination address of the computer that received the frame with the protocols used to send the frame plus the data, or a part of the message being sent. The procedure by which the process netmon.exe collects this information is known as capturing. The Network Monitor in which the file netmon.exe is executed gathers statistics on all the frames it detects on the network into a capture buffer by default, which is a held storage area in the system memory. To capture statistics on only a particular subset of frames, users can single out these frames by plotting a capture filter. If capturing information is done, user can design a display filter to specify how much of the information has been captured and the netmon.exe process will display all of this in the Network Monitor's Frame Viewer window.
In order to use the netmon.exe process accurately, the computer must have a network card that supports diverse modes. But when using the netmon.exe file on a remote machine, the local workstation does not need a network adapter card that supports diverse mode, which is only required on the host computer.
This is a safe process. There is no necessity to remove this process from your system or change it in any way.