eSource Network Packet Monitor Online Documentation

The eSource Network Packet Monitor (eNPM) is a tool that allows users to monitor network traffic at the packet level. It was designed to provide an easy to use interface with advanced features such as logging and port lookup. To begin, the eNPM works by placing your desired network device into 'promiscuous mode'. This means it will 'eaves drop' and report all packets that go through the interface. eNPM then looks at the packet, determines if it meets the filtering parameters, and displays the information on the front screen. Users can then double - click on a line in the window to see the details about that particular packet.

The Main Screen The main screen of the program utilizes icons to perform particuar tasks. Some of the icons may be grayed - out due to the software not being registered. Once registered, these options become available. The items are as follows:

1) This is a pick list that allows you to select which network interface you want to listen on. Typically, there will only be one IP address available since most home computers have only one network interface.

2) This starts the listening process

3) This stops the listening process

4) This brings up the filter window. The filter window allows you to only show particular ports and not clutter the output with unwanted results. See below for specifics on using the filter window. NOTE: When the filter is enabled, this button will blink with a red-ish background to alert you that while listening, the filter is on.

5) This is the 'About' box

6) This option will clear the contents of the display grid. If logging is enabled, the log will continue uninterrupted.

7) Port Assignment Search And Lookup. This button brings up our port, protocol, and usage searching. You can search by port number, protocol (tcp, udp, etc.), or by the listed purpose. See below for specifics on using the search window.

8) This button starts the process of logging the incoming packet information to a file. When pressed, you will be presented with a dialog to specify a file name. Once selected, the logging begins. Logs are written in plain text for easy viewing. NOTE: When logging is enabled, this button will blink with a red-ish background to alert you that while listening, the log file is being written to.

Filtering Options When you press the filter button, you are presented with the screen for setting the various options. Protocol Selections: Select from the options listed the protocol you want to filter out. If you want to capture all traffic on a port regardless of protocol, select "ALL Protocols". The following selections will be filtered: Select the known port assignments you want to filter. Some of the better known and common uses for specific port numbers are listed here. If there is a specific port number that is not listed, you can enter it in the "Custom" text box.

Port Assignment Search And Lookup When you press the filter button, you are presented with the screen for setting the various options. Enter the text you want to search for. As an example, you could enter "Mail". The results window will showw all known port assignments that have to do with "Mail". You can also enter port numbers and get a list of the registered usage for that port.

FAQ

Why do I get a screen asking me to try wireless mode?
This appears when the start button is pressed and the software is unable to throw the correct hooks and get a listening connection. This is common when using certain wireless adapters, especially in laptops. If you see this screen, check the box to try wireless mode and press OK. When you hit the Start button again, it will try using additional hooks to get connected. If you receive this message a second time and the message keeps alternating between wired and wireless, there is most likely an incompatibility with your hardware.

How are port assignments determined?
Our list of port assignments comes directly from IANA. While some software may utilize certain ports for their purposes, this list contains the official, assigned port usage.

Why do I only see 50 packets at a time?
The unregistered version only displays the first 50 incoming packets. The registered version will show up to 1024 lines of packets at a time, at which point the earliest packet will be removed from the list and the next incoming one will be placed at the end. Even though the screen holds 1024 lines, the packets will continue to come in and be listed. If logging is enabled, the number of packets logged is limited by your system's storage capabilities.

How do I register?
It's easy! Follow this link to be taken to our pmt processor, BTMicro. After registering, you will be sent the registration key. Press the register now button on the main screen and enter the code. When it is verified, the software will be unlocked and ready to use.