Determine Applications for NetMon Packet Capture
Open the NetMon Web Management interface.
On the top navigation bar, click Configuration, and then click the Capture tab.
If your traffic volume is too high (for example, the system processes more than 750 flows per second), your NetMon appliance may run low on disk space and may have performance issues that result in dropped packets. If this is the case, you should not select all applications.
You can specify packet captures in a number of ways: select all applications, select individual applications to include, or select individual applications to exclude.
All applications: To select all applications and protocols for packet capture, select the Capture All check box. When selected, the bottom portion of the page is hidden. (You can no longer see the list of protocols and applications, but NetMon is capturing all of them.)
Include some applications: To select individual applications and protocols to include for packet capture, clear the Capture All check box. Use the Select applications drop-down menu to select applications to add, or start typing the application name. As you type, the field auto-displays matching characters from the application list. Select the application you want to include.
Exclude some applications: To select individual applications and protocols to exclude for packet capture, ensure that the Capture All check box is selected. Use the Select applications drop-down menu to select applications to exclude, or start typing the application name. As you type, the field auto-displays matching characters from the application list. Select the application you want to exclude.
Excluding applications from capture does not stop NetMon from collecting, processing, and reporting on application traffic for other purposes. To stop processing traffic for specific applications entirely, see Add Applications to Blacklist.
When you are finished adding to the list, click Apply Changes.