S (Network Monitor)


See service access point.

server message block (SMB)

A file-level protocol that contains primitives, and is used for operations such as Open, Close, Read, and Write.

service access point (SAP)

A frame identifier.


A set of data packets that one station sends to another station during a capture. A session is a one-way exchange of packets in which each session has an owner (the station sending the data packets), and a partner (the station receiving the data packets). See also session_information.

session information

Information that describes a session. Network Monitor saves session information during data capture. Session information is referred to as conversation statistics, and can be retrieved by a call to the GetConversationStatistics method. See also session, capture, and conversation_statistics.


See server message block.

source address

A unique, hexadecimal number that identifies the computer from which data is sent.

special BLOB

A network packet provider (NPP) or filter binary large object (BLOB) that contains supplemental information that other BLOBs do not provide. See also network packet provider and BLOB.


A specific NIC installed on a computer that is capturing data. See also station information.

station information

Information that describes a station. Network Monitor saves the station information during a data capture. Station information is also referred to as conversation statistics that you can retrieve by a call to the GetConversationStatistics method. See also station and conversation statistics.

summary property

A parser-defined property used to group the properties of a protocol for display in the Network Monitor UI. A PROPERTYINFO structure defines a summary property in the same way that other parser-defined properties are defined. The summary property is typically the first property definition attached to a frame when Network Monitor calls the AttachProperties function.

summary pane

The pane in a Network Monitor frame viewer window that lists the frames contained in a capture file. For each frame, the summary pane lists the frame number, the time the frame is captured, the source and destination address of the frame, the protocols used to send the frame, and a brief description of the frame. If a raw address has an associated IP or IPX/XNS address, this address is displayed in Src Other Addr and Dst Other Addr. The address type (IP or IPX/XNS) appears in Type Other Addr.