Kerio Tech Network Monitor

Chapter 7 Viewing and Analysis of Captured Data

Closed connections remain displayed in the Current connections window for time

speciﬁed in the program conﬁguration (see chapter 6.5).

An error occurs when a packet from a connection is lost and the connection lost

synchronization (consecutively, the connection is terminated and the new one is es-

tablished, if needed).

•*unknown* — name of service (if it is deﬁned in Kerio Network Monitor — e.g. SMTP,

HTTP,FTP etc.) or *unknown* (unknown service)

Note: Kerio Network Monitor resolves names of computers using an analysis of the DNS

procotocol. This can be done only if the DNS query was sent before the connection was

initiated. If the client has this information in its local DNS cache, the DNS query is not

sent and Kerio Network Monitor “sees” only the IP address of a destination server.

Current Connections Window

The Current connections toolbar contains the following functions and options (from left

to right):

Select columns & setup sorting This button opens the dialog window for the Current

connections window parameters settings.