NetworkTrafficView Changelog

What's new in NetworkTrafficView 2.50

Jul 3, 2023
  • Added support for using the IP-Location files from https://github.com/sapics/ip-location-db for viewing country/city information of Source/Destination IP addresses.
  • In order to use these IP-Location files, simply download the desired file and put it in the same folder of NetworkTrafficView.exe with its original filename (For example: asn-country-ipv4.csv , dbip-city-ipv4.csv)

New in NetworkTrafficView 2.44 (Apr 23, 2023)

  • Added 'Black Background' option (Under the View menu). When it's turned on, the main table is displayed in black background and white text, instead of default system colors.
  • Added 'Sort By' button to the toolbar.

New in NetworkTrafficView 2.43 (Feb 2, 2023)

  • Fixed bug: NetworkTrafficView randomly crashed when using the GeoLite2 City database.

New in NetworkTrafficView 2.42 (Oct 22, 2022)

  • Fixed the default columns size in high DPI mode.

New in NetworkTrafficView 2.41 (Jul 8, 2021)

  • Added option to change the sorting column from the menu (View -> Sort By). Like the column header click sorting, if you click again the same sorting menu item, it'll switch between ascending and descending order. Also, if you hold down the shift key while choosing the sort menu item, you'll get a secondary sorting.

New in NetworkTrafficView 2.40 (May 12, 2021)

  • Added 'SACK Permitted' column ('Yes' or 'No' values), which shows whether the source address allows to use TCP SACK (TCP Selective Acknowledgments).
  • Added 'TCP SACK' column, which shows the number of TCP SACK packets sent by the source address.
  • These options are available only for TCP items and only when the selected options are 'Display the 2 packet directions in 2 separated lines' and 'Group by combination of Ethernet Type, IP Protocol, Addresses, and TCP/UDP Ports'.
  • Updated to work properly in high DPI mode.

New in NetworkTrafficView 2.30 (May 25, 2019)

  • Added new columns: 'TCP Window Size', 'TCP Window Scale', 'Maximum Segment Size'. Available only for TCP items and only when the selected options are 'Display the 2 packet directions in 2 separated lines' and 'Group by combination of Ethernet Type, IP Protocol, Addresses, and TCP/UDP Ports'.
  • Added 'TTL' (Time To Live) column.

New in NetworkTrafficView 2.25 (May 11, 2019)

  • Added imporved process detection and now it also works for UDP traffic. This feature works only when you run NetworkTrafficView as Administrator and the 'Trace TCP/UDP Processes' option is turned on.

New in NetworkTrafficView 2.20 (Mar 6, 2019)

  • Added option to filter by TCP/UDP port numbers (In 'Advanced Options' window).
  • Added 'Always On Top' option.
  • Added 'Add Header Line To CSV/Tab-Delimited File' option (Turned on by default).

New in NetworkTrafficView 2.16 (Aug 29, 2018)

  • Fixed bug from version 2.15: NetworkTrafficView crashed when selecting network interface without connection information.

New in NetworkTrafficView 2.15 (Jul 22, 2018)

  • The information of the selected network adapter is now displayed in the window title

New in NetworkTrafficView 2.13 (Feb 15, 2018)

  • Added 'Select All' and 'Deselect All' to the 'Column Settings' window.

New in NetworkTrafficView 2.12 (Dec 20, 2017)

  • Fixed the 'Service Name' column to detect service names from the official services list of Microsoft (C:windowssystem32driversetcservices).

New in NetworkTrafficView 2.11 (Oct 2, 2017)

  • Automatic export feature: You can now choose to generate a new filename on every session (When you close the program and then run it again) or on every save. You can also generate a filename with date/time (e.g: ntv20170925102400.csv) instead of numeric counter.

New in NetworkTrafficView 2.10 (Jul 11, 2017)

  • Added option to automatically export the network traffic information to a file (csv/tab-delimited/html/xml) every xx seconds (In 'Advanced Options' window).

New in NetworkTrafficView 2.06 (Apr 20, 2017)

  • Added 'IPNetInfo - Source IP' option.

New in NetworkTrafficView 2.05 (Dec 29, 2016)

  • Added 'Save All Items' (Shift+Ctrl+S).

New in NetworkTrafficView 2.04 (Sep 13, 2016)

  • NetworkTrafficView now automatically loads the new version of WinPCap driver if it's installed on your system.

New in NetworkTrafficView 2.03 (Jul 19, 2016)

  • Added 'Align Numeric Columns To Right' option

New in NetworkTrafficView 2.02 (Apr 14, 2016)

  • Added option to choose another font (name and size) to display in the main window

New in NetworkTrafficView 2.01 (Nov 13, 2015)

  • NetworkTrafficView now tries to load the dll of Network Monitor Driver 3.x (NmApi.dll) according to the installation path specified in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Netmon3. This change should solve the problem with loading the Network Monitor Driver 3.x on some systems

New in NetworkTrafficView 2.00 (Sep 24, 2015)

  • Added 4 columns to the adapters list in the 'Capture Options' window: 'Connection Name', 'MAC Address', 'Instance ID', 'Interface Guid'.
  • When using WinPCap driver , NetworkTrafficView now displays more accurate information in the adapters list of the 'Capture Options' window.

New in NetworkTrafficView 1.96 (Aug 31, 2015)

  • NetworkTrafficView now displays the process names (Some of them without the full path) for most processes when you run it without elevation ('Run As Administrator')

New in NetworkTrafficView 1.95 (Aug 12, 2015)

  • Added 'Auto Size Columns On Every Update' option.
  • Added /StopCommandLineCapture command-line option, which allows you to stop a command-line capture that is currently running and save all captured information to a file.
  • You can now specify '0' in the /CaptureTime command-line in order to capture the network traffic without time limit. The capture will stop when you run NetworkTrafficView with /StopCommandLineCapture command.
  • Added /SaveToFileInterval command-line option, which allows you to save the capture result every xx seconds, instead of saving to file only when the capture ends.

New in NetworkTrafficView 1.90 (May 15, 2015)

  • Added option to group by source address or destination address.

New in NetworkTrafficView 1.87 (Nov 27, 2014)

  • Fixed bug: NetworkTrafficView failed to remember the last size/position of the main window if it was not located in the primary monitor.

New in NetworkTrafficView 1.86 (Aug 11, 2014)

  • Added secondary sorting support: You can now get a secondary sorting, by holding down the shift key while clicking the column header. Be aware that you only have to hold down the shift key when clicking the second/third/fourth column. To sort the first column you should not hold down the Shift key.

New in NetworkTrafficView 1.85 (May 12, 2014)

  • NetworkTrafficView now allows you to automatically add it to the allowed programs list of Windows firewall when starting to capture and remove it when you stop capturing. This option is needed when using the 'Raw Socket' capture method while Windows firewall is turned on, because if NetworkTrafficView is not added to Windows firewall, the incoming traffic is not captured at all.
  • NetworkTrafficView now offers you to run it as administrator (Under Windows Vista/7/8 with UAC) if you start to capture using Raw Sockets method.

New in NetworkTrafficView 1.82 (Apr 16, 2014)

  • Added columns names ('IP Address' and 'Adapter Name') to the adapters list on the 'Capture Options' window

New in NetworkTrafficView 1.81 (Jan 16, 2014)

  • Added integration with IPNetInfo utility

New in NetworkTrafficView 1.80 (Dec 16, 2013)

  • Added 'Host Names and IP Addresses' to the 'Addresses Display Mode'

New in NetworkTrafficView 1.78 (Nov 1, 2013)

  • Fixed bug: The 'Promiscuous Mode' check-box in the 'Capture Options' window was not saved to the configuration file

New in NetworkTrafficView 1.77 (Oct 17, 2013)

  • Added /cfg command-line option, which instructs NetworkTrafficView to use a config file in another location instead if the default config file, for example:
  • NetworkTrafficView.exe /cfg "%AppData%\NetworkTrafficView.cfg"
  • Added 'Show Time In GMT' option.

New in NetworkTrafficView 1.76 (Aug 31, 2013)

  • Added 'Maximum Packet Size' column. For TCP connections that transfers significant amount of data, the value under this column represents the actual MTU

New in NetworkTrafficView 1.75 (Jul 16, 2013)

  • Added option to group by service name - http, https, ftp, and so on. (In 'Advanced Options' window).

New in NetworkTrafficView 1.70 (May 30, 2013)

  • Added option to group by IP country (In 'Advanced Options' window). This feature requires to download IP address to country file (the file of software77.net or the GeoLite City database).

New in NetworkTrafficView 1.65 (May 9, 2013)

  • The 'First Packet Time', 'Last Packet Time', and 'Duration' columns now display more accurate result when using the WinPcap driver or the Microsoft Network Monitor driver, version 3.4 or greater. That's because NetworkTrafficView takes the capture timestamps provided by these drivers instead of taking the current date/time from the system at the moment that NetworkTrafficView analyzes the packet.
  • Added 'Latency' column, which calculates and displays the network latency in milliseconds. It calculates the time difference from the moment that the client sends the first packet and the moment that the response received from the server. The result is usually very similar to what you get if you ping to the same address. Be aware that this column is only active when the Packet Direction Grouping (In 'Advanced Options' window) is 'Display both packet directions in a single line'. Also, to get accurate results, you should use the WinPcap driver or the Microsoft Network Monitor driver (version 3.4 or later) to capture the packets.

New in NetworkTrafficView 1.62 (Mar 27, 2013)

  • Fixed the flickering problem on Windows 7.

New in NetworkTrafficView 1.61 (Mar 7, 2013)

  • When capturing traffic from command-line ( with /CaptureTime ), NetworkTrafficView now also updates the following columns: Data Speed, Maximum Data Speed, Process ID, and Process Filename.

New in NetworkTrafficView 1.60 (Feb 5, 2013)

  • Added 'Load From Capture File' option. This option allows you to load a capture file created by WinPcap/Wireshark (Requires the WinPcap driver) or a capture file created by Microsoft Network Monitor driver (Requires the Network Monitor driver 3.x) and then display the network traffic statistics, exactly like the traffic statistics you get with a live capture.
  • Added /load_file_pcap and /load_file_netmon command-line options.

New in NetworkTrafficView 1.57 (Jan 14, 2013)

  • Fixed bug: NetworkTrafficView displayed the process filename incorrectly

New in NetworkTrafficView 1.56 (Dec 27, 2012)

  • Added 'Auto Size Columns+Headers' option, which allows you to automatically resize the columns according to the row values and column headers.
  • Added 'Mark Odd/Even Rows' option, under the View menu. When it's turned on, the odd and even rows are displayed in different color, to make it easier to read a single line.
  • Fixed issue: The properties dialog-box and other windows opened in the wrong monitor, on multi-monitors system.

New in NetworkTrafficView 1.55 (Nov 27, 2012)

  • Added support for GeoLite City database. You can now download the GeoLite City database (GeoLiteCity.dat.gz), put it in the same folder of NetworkTrafficView.exe, and NetworkTrafficView will automatically use it to get the country/city information for every IP address

New in NetworkTrafficView 1.50 (Nov 14, 2012)

  • Added option to save/load the configuration of NetworkTrafficView.
  • Added command-line support: You can now run NetworkTrafficView to capture traffic for the specified number of seconds, and then save the result into tab-delimited/csv/xml/html file, without displaying any user interface. For example: NetworkTrafficView.exe /shtml c:\temp\traffic.html /CaptureTime 20 /Sort "~Total Data Size"

New in NetworkTrafficView 1.42 (Aug 6, 2012)

  • Fixed bug: When opening the 'Capture Options' dialog-box after Network Monitor Driver 3.x was previously selected, NetworkTrafficView switched back to Raw Sockets mode.

New in NetworkTrafficView 1.41 (Jul 19, 2012)

  • Fixed NetworkTrafficView to sort Ipv4 addresses correctly.

New in NetworkTrafficView 1.40 (May 16, 2012)

  • Added option to filter by the duration of every packets statistics line (In 'Display Filter Options' window).

New in NetworkTrafficView 1.35 (Apr 25, 2012)

  • Added option to choose the displayed speed unit: kB/Sec, KiB/Sec, MB/Sec, MiB/Sec, or Mbps.

New in NetworkTrafficView 1.31 (Mar 20, 2012)

  • The speed filter now allows you to specify non-interger values (e.g: 0.5 KB/Sec)
  • Fixed the problem with Windows 2000 appeared on version v1.30

New in NetworkTrafficView 1.30 (Mar 8, 2012)

  • Added new option: 'Display only items with speed above...' (In Display Filter Options window)
  • Added new option: Display only items with minimum number of packets (In Display Filter Options window)

New in NetworkTrafficView 1.25 (Feb 14, 2012)

  • Added 'Source Country' and 'Destination Country' columns, which displays the country of the specified IPv4 addresses. In order to activate this feature, you have to download the IP to countries file from this Web page, and then put the downloaded IpToCountry.csv file in the same folder of the .exe file.
  • Fixed the accelerator key of 'Stop Capture' (F6)

New in NetworkTrafficView 1.20 (Feb 4, 2012)

  • Added 'Start As Hidden' option. When this option and 'Put Icon On Tray' option are turned on, the main window of NetworkTrafficView will be invisible on start.

New in NetworkTrafficView 1.15 (Nov 21, 2011)

  • Added 5 new columns which counts the flags of all TCP packets: TCP Ack, TCP Push, TCP Reset, TCP Sin, and TCP Fin.

New in NetworkTrafficView 1.10 (Oct 29, 2011)

  • Added 'Put Icon On Tray' option.

New in NetworkTrafficView 1.05 (Oct 7, 2011)

  • Added new general grouping mode: Group by process.