AbEthMon.exe

SUMMARY

AbEthMon monitors the busload of the Ethernet connections found on a PC.

SYNTAX

AbEthMon.exe

DESCRIPTION

AbEthMon monitors the busload of the Ethernet connections found on a PC.
A window on the monitor lists the found connections as well as the actual values (in megabits / seconds)

Ones per minute the minimum, maximum and average of the busload is written to the "AbEthMon.log" file. This is done for any connection its busload was higher than 0 Mbits/s at least ones in the last minute. This data are shown in the consol window also.

The file "AbEthMon.log" is conceived as a ring buffer and may take as much as 20 MB.

Installation
Since Windows does not allow access to the single packages on the Ethernet a driver must be installed first.
AbEthMon uses the driver of the WinPcap library. The actual version is 3.1.

To install the driver the file "WinPcap_3_1.exe" is copied to the PC and executed. Follow the instructions of the installation assistant.

Since WinPcap is used by many Ethernet tools (e.g. Sniffer) WinPcap might be installed already.
If the same version is installed the installations is aborted and you may continue with the installation of AbEthMon.
Is the installed version is an older one, you are asked whether you want to uninstall that one.
Note:
That shouldn’t be a problem if the installed version is not too old.
If you experience problems using the existing Sniffer reinstall the old "WinPcap" and afterwards the Sniffer.
Since ‘AbEthMon’ uses a very small portion of ‘WinPcap’ you got a good chance that ‘AbEthMon’ will work with the older version also.

Calling the program
Calling the program can be done via a batch file that might look alike:

c:
cd \vision\bin
start AbEthMon.exe

Example of an output file c:\vision\bin\AbEthMon.log 

1. 2006-06-27 13:53 (Mbit/s) min=0.043037 max=8.222664 avg=0.979880
    Source: 192.168.0.2: (Mbit/s) min=0.000000 max=5.515259 avg=0.048983
    192.168.0.38 -> 192.168.0.2: (Mbit/s) min=0.000000 max=2.132339 avg=0.013913
    UDP: 192.168.0.2:18516 -> 192.168.0.38:21584  (Mbit/s) min=0.000000 max=1.104210 avg=0.013641
===EOF===

INI-FILES

AbEthMon.ini

 In the file ‘AbEthMon.ini’ located in the actual folder the behavior of AbEthMon may be defined.

Section [Settings]

Entry Type Description / Example Default
MaxFilesize integer
The maximum size of the log file in KB.
Example
20000
Default_MbpsLinkSpeed integer
If AbEthMon die Geschwindigkeit eines LAN-Adapters nicht feststellen kann (dies ist z.B. bei Loopback-Devices der Fall), wird dieser Wert als Default angenommen (Mbit/s).
Example
100

Section [Limits]

Entry Type Description / Example Default
SrcDstAddrPercent integer
If within the last minute the sum of all packages from an IP source address or that one to an IP target address exceeds that rate (in %), the source= or target address is listed and written to the log file.
5.0
ConnectionPercent integer
If within the last minute the overall speed of the sum of all packages (i.e. a certain combination of source= and target address) that rate (in %) is exceeded, the data for these connections are listed and written to the log file.
Example
2.0
DetailPercent integer
If within the last minute the overall speed of the sum of all packages for a detailed connection (i.e. a certain combination of source= and target address, source= and target port as well as protocol) that rate in (%) is exceeded, the data for these connections are listed and written to the log file.
It is distinguished between 3 protocols:
TCP, UDP, all others (indicated as ???)
Example
1
Syntax Notation
[aaa]
aaa is optional (zero or one occurences)
(aaa|bbb)
aaa exclusive or bbb
(aaa)*
aaa may occur indefinitely often or may be omitted
(aaa)+
aaa may occur indefinitely often but at least once
(aaa)m..n
aaa may occur from m to n times