MegaPing Overview

		MegaPing is an ultimate set of diagnostics and information tools. It brings the convenience of Windows to the most commonly used internet utilities, including DNS lookup name, DNS list hosts, Finger, Host Monitor, IP scanner, NetBIOS Scanner, Network time synchronizer, Ping, Port scanner, Share scanner, Traceroute, and Whois.
		MegaPing provides detailed information about running applications, processes, and even loaded modules used by different programs. It also provides information about local shared resources, including hidden shares, established sessions by remote computers, files opened by remote computers, and connected remote shared resources. MegaPing can retrieve and display important system information, including ICMP protocol information and statistics, IP routing table information , TCP connect table information, TCP protocol information and statistics , UDP open ports information , UDP protocol information and statistics, interfaces information and statistics , IP routing information, and ARP information.
MegaPing Network Tools:

		DNS list hosts is a network tool that queries domain servers for information about hosts in their domains.
		DNS lookup name is a network tool that queries domain servers for information about specified hosts and other domain name servers.
		Finger is a network tool that queries some Internet servers for information about users who are registered on that server (provided a Finger server is running on the remote host).
		Host Monitor is a network tool that combines port scanner and ping capabilities and is capable of sending email notifications, sound alerts, and more.
		IP Scanner is a network tool that can scan any range of IP addresses to determine active remote hosts.
		NetBIOS Scanner is a network tool that can scan any range of IP addresses and list computers offering NetBIOS name tables, and their MAC addresses.
		Network Time synchronizer is a network tool that synchronizes your local computer’s clock with a remote time server.
		Ping is a network diagnostic tool that sends a series of packets to the selected address to see if it's alive, and how long it takes packets to make the round trip
		Port Scanner is a network tool that can determine what services (ports) are open (offered) by remote hosts.
		Share Scanner is a network tool that allows network administrators to scan any range of IP addresses for visible or unprotected network resources such as shared drives and printers.
		Traceroute is a network diagnostic tool that lets you trace and view the actual route an IP packet follows to an Internet host.

MegaPing Information Tools:

		Applications tool provides information about programs running on your computer.
		Processes tool provides information about processes running on your computer.
		Modules tool provides information about modules that are loaded by running processes.
		Connections tool provides information about current TCP connections and open UDP ports.
		Statistics tool provides statistics for IP, ICMP, TCP, and UDP protocols.
		Interfaces tool provides information about network interfaces on which this computer can send/receive IP datagrams.
		IP Routing tool displays information about every route presently known to this computer.
		ARP tool displays information about the IP-to-Ethernet or token ring physical address translation tables used by the Address Resolution Protocol.
		Shares tool displays information about each shared resource this computer, including hidden shares, and users connected to a share.
		Sessions tool displays information about sessions established on this computer.
		Files tool displays information about all open files on this computer.
		Remote Resources tool displays information about connections to remote shared resources.
Requirements:

MegaPing requires Windows 95, 98, NT, 2000, XP, or later.


Connections

Connections tool provides information about current TCP connections and open TCP and UDP ports.

Disclaimer:

MegaPing is not an anti-virus program.  MegaPing’ Connections tool only reports about any open ports and provides their description and possible usage (legitimate as well as hostile).

A different color of the opened port indicates higher or lower risk of having a particular port opened (red means higher security risk, yellow means lower security risk, green means low security risk).
Always use updated anti-virus software to minimize risk associated with trojans and any other malicious programs.

Protocol

This column lists every connection and every open port by protocol (TCP and UDP).

Local Address

This column displays local IP address and local port number for each connection and each open port.

Remote Address

This column displays remote IP address and remote port number for each TCP connection.

State

This column displays state for each TCP connection.

An object of type of TCP connection is transient, in that it ceases to exist when (or soon after) the connection makes the transition to the CLOSED state.

A TCP connection can be in one of the following states:

-	CLOSED.

-	LISTEN.

-	SYN_SENT.

-	SYN_RECEIVED.

-	ESTABLISHED.

-	FIN_WAIT1

-	FIN_WAIT2.

-	CLOSE_WAIT.

-	LAST_ACK.

-	CLOSING.

-	TIME_WAIT.

Any active TCP connection can be reset using Reset button.

TCP traffic to and from this computer can be suspended using Disable TCP Traffic combo box.


DNS List Hosts

DNS List Hosts is a network utility that can be used to list addresses in specified domain by performing an AFXR (zone transfer) DNS lookup.

MegaPing is capable of performing multiple AFXR DNS lookups simultaneously.

It can request any of 41 different DNS record types:

A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, TKEY, TSIG, MAILB, MAILA, NAPTR, KX, CERT.

To use the DNS List Hosts tool

1. Select the DNS List Names service from the service tree control.
2. Enter in the domain text box the domain name to query a listing for (for example, magnetosoft.com).

3. Select a DNS records type to display from the records type list (default value is A (address)).
4. Click Start.
5. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Domain list can also be used to send DNS zone transfer queries about multiple domains simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
6. DNS Lookup Name displays the results of the query.

7. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

8. Click SaveAs to save the results.

Related topics

DNS Settings


DNS Lookup Name

DNS Lookup Name is a network utility that can retrieve information about the host/domain by performing a general DNS lookup,

MegaPing is capable of performing multiple general DNS lookups simultaneously.

It can request any of 41 different DNS record types:

A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, TKEY, TSIG, MAILB, MAILA, NAPTR, KX, CERT.

To use the DNS Lookup Name tool

1. Select the DNS Lookup Name service from the service tree control.
2. Enter in the destination address text box the host name or IP address of the remote host (for example, www.microsoft.com).

3. Select a DNS query to use from the query type list (default value is A (address)).
4. Click Start.
5. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Destination address list can also be used to send DNS queries about multiple remote hosts simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
6. DNS Lookup Name displays the results of the query.

7. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

8. Click SaveAs to save the results.

Related topics

DNS Settings


DNS Settings

Append default Domain Name

Check this to append default domain name to each query in format “HostName.DomainName”.

Default Domain Name

Specifies the default domain name.

Default Name Server

Specifies the default domain name.

Port Number

Specifies the port to send a DNS query on.

Query Class

Specifies a DNS query class (a value that identifies a protocol family or instance of a protocol). See DNS_Query Classes for a complete list of supported query classes.

Query Type

Specifies a DNS query type (a value that specifies the specific type of information). See DNS_Query Types_and Resource_Records_Types a complete list of supported query types.

Recurse

Ask for recursive answer to query.

Retry

Specifies number of retries.

Root

Sets current default name server to the domain name space root.

Search List

Specify search list in the format NAME1/NAME2, etc and set default domain name to NAME1.

Default value for this property will show default domain name if available.

Timeout

Timeout value to wait for replies, in seconds.

Use Defaults

Resets all DNS settings back to default values.

Virtual Circuit

Always use a virtual circuit (send query over TCP protocol).


Finger

Finger is a network utility that can be used to monitor users logged into a remote system by getting information about users based on the username, and tracking the amount of time they have been logged in for.

To use the Finger tool

1. Select the Finger service from the service tree control.
2. Enter in the destination address text box the host name or IP address of the remote host (for example, www.microsoft.com).

3. Click Start.
4. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Destination address list can also be used to send Finger queries to multiple remote hosts simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
5. Finger displays the results of the query.

6. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

7. Click SaveAs to save the results.


Interfaces

Interfaces tool provides information about network interfaces (regardless of their current state) on which this computer can send/receive IP datagrams.

Index

A unique value for each interface.  The value for each interface must remain constant at least from one re-initialization of the entity's network management system to the next re-initialization.

Description

A text string containing information about the interface.  This string can include the name of the manufacturer, the product name and the version of the hardware interface.

Type

The type of interface, distinguished according to the physical/link/network protocol(s) immediately "below" IP in the protocol stack.

Can be one of the following:

-	Other (none of the following).

-	Regular1822.

-	Hdh1822(3),

-	Ddn-x25(4),

-	Rfc877-x25.

-	Ethernet-csmacd.

-	Iso88023-csmacd.

-	Iso88024-tokenBus.

-	Iso88025-tokenRing.

-	Iso88026-man.

-	StarLan.

-	Proteon-10Mbit.

-	Proteon-80Mbit.

-	Hyperchannel.

-	Fddi.

-	Lapb.

-	Sdlc.

-	T1-carrier.

-	Cept (european equivalent of T-1).

-	Basic Isdn.

-	Primary Isdn.

-	Proprietary serial.

-	Proprietary Point To Point Serial.

-	Loopback.

MTU

The size of the largest IP datagram that can be sent/received on the interface specified (in bytes).

Speed

An estimate of the interface's current bandwidth (in bits per second).  For interfaces that do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth.

Adapter Address

The interface's address at the protocol layer immediately

"below" IP in the protocol stack.  For interfaces which do not have such an address (e.g., a serial line), this object should contain an octet string of zero length.

Admin Status

The desired state of the interface.  Can be one of the following:

-	Up (ready to pass packets).

-	Down.

-	Testing (in some test mode). .  The testing state indicates that no operational packets can be passed.

Operational Status

The current operational state of the interface. Can be one of the following:

-	Up (ready to pass packets).

-	Down.

-	Testing (in some test mode). .  The testing state indicates that no operational packets can be passed.

Last Change

The value of sysUpTime at the time the interface entered its current operational state.  If the current state was entered prior to the last re-initialization of the local network management subsystem, then this object contains a zero value.

Bytes Received

The total number of bytes received on the interface, including framing characters.

Unicast Packets Received

The number of (subnet) unicast packets delivered to a higher-layer protocol.

Non-Unicast Packets Received

The number of non-unicast (i.e., subnet broadcast or subnet multicast) packets delivered to a higher-layer protocol.

Discarded Inbound Packets without Errors

The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.  One possible reason for discarding such a packet could be to free up buffer space.

Discarded Inbound Packets with Errors

The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.

Discarded Inbound Packets with Unknown Protocols

The number of packets received via the interface which were discarded because of an unknown or unsupported protocol.

Bytes Transmitted

The total number of octets transmitted out of the interface, including framing characters.

Requested Unicast Packets

The total number of packets that higher-level protocols requested to be transmitted to a subnet-unicast address, including those that were discarded or not sent.

Requested Non-Unicast Packets

The total number of packets that higher-level protocols requested be transmitted to a non-unicast (i.e., a subnet broadcast or subnet multicast) address, including those that were discarded or not sent.

Discarded Outbound Packets without Errors

The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being transmitted.  One possible reason for discarding such a packet could be to free up buffer space.

Discarded Outbound Packets with Errors

The number of outbound packets that could not be transmitted because of errors.

Output Packet Queue

The length of the output packet queue (in packets).


Network Time

Time synchronizer is a network tool that can be used for very accurate local clock synchronization with a remote time server across the Internet.

Time synchronizer can retrieve the exact time from any SNTP compliant time server across the Internet, and synchronize your computer' local clock accurately to the order of milliseconds.

To use the Network Time tool

1. Select the Network Time service from the service tree control.
2. Enter in the time server text box the host name or IP address of the remote time server (for example, time.nist.gov), or select any server from the time servers list

3. Check Synchronize local clock if you want local clock to be synchronized, or leave it unchecked, if you just want to query a time server.

4. Click Start.
Network Time displays the results of the query.

5. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

6. To synchronize local clock periodically, check Synchronize Periodically and specify a synchronization interval (for example, every 24 hours).

7. To synchronize local clock every time when MegaPing is launched, check

Synchronize On Startup.


Ping

 Ping is a network utility that can be used for network diagnosing, troubleshooting, and monitoring.

It sends out a series of packets to the selected address to see if it is online and how long it takes packets to make the round trip

To use the Ping tool

1. Select the Ping service from the service tree control.
2. Enter in the destination address text box the host name or IP address of the remote host (for example, www.microsoft.com).

3. Click Start.
4. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Destination address list can also be used to send queries to multiple remote hosts simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
5. Ping displays the results of the query.

6. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

7. Click SaveAs to save the results.

Related topics

Ping Settings


Ping Settings

Interval between packets

Specifies an interval between two packets.  For example, if interval is 10 seconds, MegaPing will send a packet every 10 seconds.

Number of echo requests

Specifies number of Ping requests to send.

Record Route

Record route for count hops.

Resolve Names

It enables an automatic lookup of the host name by IP address. This is to be able to supply the user with the host name. If the user does not need the name of the replying host, and wishes to decrease the network traffic this has to be unchecked.

Send buffer size

Specifies the send buffer size.

Set Don’t Fragment flag in packet

Specifies the flags field contained in the IP header of the packet to be sent (unchecked – May Fragment, checked - Don’t Fragment).

Timeout

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

Timestamp for count hops

Timestamp for count hops.

TTL

Specifies the Time to live field in the IP header to be sent.

Type of Service

Specifies the Type of service field in the IP header to be sent.

Type of service provides an indication of the abstract parameters of the quality of service desired. See Type of Service for a complete list of possible values.

Use Defaults

Resets all Ping settings back to default values.


Port Scanner

Port Scanner is a network utility can be used for network exploration or security auditing.

It can determine what services (ports) are open (offered) by remote hosts.

Port Scanner is capable of scanning multiple hosts simultaneously.
It can scan different protocols simultaneously:

- TCP ports only;

- UDP ports only;

- TCP and UDP ports simultaneously.

Port Scanner can operate in 3 different scan modes:

- Scan range of ports;

- Scan authorized ports (authorized port numbers are divided into three ranges:

the Well Known Ports, the Registered Ports, and the Dynamic and/or Private Ports.

Well Known Ports are those from 0 through 1023, Registered Ports are those from 1024 through 49151, and the Dynamic and/or Private Ports are those from 49152 through 65535.

The Well-Known Ports are assigned by the IANA (Internet Assigned Numbers Authority) and on most systems can only be used by system (root level) processes or by programs executed by privileged users);

- Scan hostile ports only (ports, that are mostly used for backdoors or trojan programs).

Hackers/crackers that break into systems often start processes running on one of the following ports and then use them to either regain entry or launch attacks against other sites).

To use the Port Scanner tool

1. Select the Port Scanner service from the service tree control.
2. Enter in the destination address text box the host name or IP address of the remote host (for example, 127.0.0.1).

3. Select scan mode (Hostile Ports, Autorized ports, or Range of ports),

4. Select protocols (TCP, UDP, or both).  Click on the Port Scanner Settings tab, select protocols to scan, click on the Port Scanner tab.

3. Click Start.
4. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Destination address list can also be used to scan multiple remote hosts simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
5. Port Scanner displays the results of the query.

6. During the query, the Start button toggles to Stop. You can click Stop at any time to stop scanning.

7. Click SaveAs to save the results.

Disclaimer:

MegaPing is not an anti-virus program.  MegaPing’ Port Scanner tool only reports about any open ports and provides their description and possible usage (legitimate as well as hostile).

A different color of the opened port indicates higher or lower risk of having a particular port opened (red means higher security risk, yellow means lower security risk, green means low security risk).
Always use updated anti-virus software to minimize risk associated with trojans and any other malicious programs.

Related topics

Port Scanner Settings


Port Scanner Settings

Connect Timeout

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

Port Range

Specifies starting and ending port number values for the ‘Range of Ports’ scan mode.

Ports Info

Displays an extensive ports database.

Protocols

Specifies protocols to scan (TCP, UDP, or both).

Scan Mode

Specifies the scan mode.

MegaPing can operate in 3 different scan modes:

- Scan range of ports. Only specified range of ports will be scanned.

- Scan authorized ports only.  Port numbers are divided into three ranges: the Well Known Ports, the Registered Ports, and the Dynamic and/or Private Ports. Well Known Ports are those from 0 through 1023, Registered Ports are those from 1024 through 49151, and the Dynamic and/or Private Ports are those from 49152 through 65535. The Well Known Ports are assigned by the IANA (Internet Assigned Numbers Authority) and on most systems can only be used by system (root level) processes or by programs executed by privileged users).

- Scan hostile ports only  (ports, that are mostly used for backdoors or trojan programs. Hackers/crackers that break into systems often start processes running on one of the following ports and then use them to either regain entry or launch attacks against other sites.

Scan Timeout

Specifies the timeout value in seconds that is used to limit a port scanning process.

Use Defaults

Resets all Port Scanner settings back to default values.


Statistics

Statistics tool provides statistics for IP, ICMP, TCP, and UDP protocols.

IP statistics

ICMP statistics

TCP statistics

UDP Statistics


Traceroute

Traceroute is a network utility that can be used to obtain the list of gateways between your computer and a particular network device.

Traceroute will send three packets for each hop of the route.

To use the Traceroute tool

1. Select the Traceroute service from the service tree control.
2. Enter in the destination address text box the host name or IP address of the remote host (for example, www.microsoft.com).

3. Click Start.
4. If you want to use this destination in the future, click Add, to add new entry to the destination address list.

Destination address list can also be used to process traceroute queries for multiple remote hosts simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
5. Traceroute displays the results of the query.

6. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

7. Click SaveAs to save the results.

Related topics

Traceroute Settings


Traceroute Settings

Maximum Number of Hops

Maximum number of hops to search for target.

The rest of Tracerote settings can be found at Ping Settings (except for

Interval between packets, not available in Traceroute).


WhoIs

WHOIS is a network utility that can be used to retrieve information about a specific domain, such as the registrant's company name, address, or contact information.

In <Auto> mode it can intelligently query the right remote database based on the query type (host IP address, host name, or domain name) and on the corresponding designated WHOIS server.

In many countries different subdomains have different designated WHOIS databases, MegaPing can easily handle that.

It can also query any WHOIS server with any request necessary.

MegaPing has an extensive database that contains all existing Top Level Domain information and many second-level and even third level domains.  This information can be accessed, modified, added to, or customized as necessary.

To use the Whois tool

1. Select the Whois service from the service tree control.
2. Enter in the query text box the host name or IP address of the remote host (for example, www.ibm.com), or domain name (for example, intel.com)

3. Click Start.
4. If you want to use this destination in the future, click Add, to add new entry to the query  list.

Destination address list can also be used to send multiple Whois queries simultaneously.  Simply select any number of entries in the destination address list, or check Select All.  Click Start.
5. Whois displays the results of the query.

6. You can select a specific server in the whois server box to send whois queries to. When you do this you have access to a much wider selection of arguments (which can be entered in the query text box).

7. During the query, the Start button toggles to Stop. You can click Stop at any time to stop the query.

8. Click SaveAs to save the results.

Related topics

WhoIs Settings


WhoIs Settings

Default WhoIs Server
Default remote WHOIS server to process queries in arbitrary format in <Auto> mode.  By default, it is whois.networksolutions.com.

Default WhoIs Lookup by IP Server

Default WHOIS server to process queries in IP address format.  By default, it is whois.arin.net.

Use Default WhoIs Server to query info about Generic Domain.

Check this control to alter the designated WhoIs server for the generic Top Level Domains (.com, org, .net, etc).

For example, by default, all queries about .com domains are directed to whois.crsnic.net.  If Use Default WhoIs Server to query info about Generic Domain Generic Domains is checked, than these queries will be sent to the default WhoIs server.

Timeout

Timeout value to wait for replies, in seconds.

Port

WHOIS service port on server

Domains

Displays an extensive database that contains all existing Top Level Domain information and many second-level and even third level domains.  This information can be accessed, modified, added to, or customized as necessary.  This database allows MegaPing to process requests about any Top Level Domain domain or any defined any-level domain or subdomain in <Auto> mode.

Use Defaults

Resets all WhoIs settings back to default values.


Host Name

The unique name of a host.  For example, www.ibm.com is the host name of a computer whose IP address is 129.42.19.99.  The host name is usually the same thing as the Fully Qualified Domain Name.


IP Address

Every host on the Internet must have a unique Internet address (also called an IP address.  These addresses are 32-bit numbers that are normally written as four decimal numbers, one for each byte of address.  This is called dotted-decimal notation


Zone

A full domain, a domain and its subdomains, or a portion of a domain for which a name server has the authority to maintain data (is the primary name server).


DNS Query Classes

The following provides a complete listing of query classes supported MegaPing.

-	IN (Internet).

-	CHAOS (MIT Chaos-net).

-	HESIOD (MIT Hesiod).

-	NONE (For prereq. sections in update requests).

-	ANY (Wildcard match).


DNS Query Types and Resource Records Types

The following provides a complete listing of DNS resource types and query types supported by MegaPing.

-	INVALID (Cookie).

-	A (Host address).

-	NS (Authoritative server).

-	MD (Mail destination).

-	MF (Mail forwarder).

-	CNAME (Canonical name).

-	SOA (Start of authority zone).

-	MB (Mailbox domain name).

-	MG (Mail group member).

-	MR (Mail rename name).

-	NULL (Null resource record).

-	WKS (Well known service).

-	PTR (Domain name pointer).

-	HINFO (Host information).

-	MINFO (Mailbox information).

-	MX (Mail routing information).

-	TXT (Text strings).

-	RP (Responsible person).

-	AFSDB (AFS cell database).

-	X25 (X 25 calling address).

-	ISDN (ISDN calling address).

-	RT (Router).

-	NSAP (NSAP address).

-	NSAP PTR (Reverse NSAP lookup (deprecated)).

-	SIG (Security signature).

-	KEY (Security key).

-	PX (X.400 mail mapping).

-	GPOS (Geographical position (withdrawn)).

-	AAAA (Ip6 Address).

-	LOC (Location Information).

-	NXT (Next domain (security)).

-	EID (Endpoint identifier).

-	NIMLOC (Nimrod Locator).

-	SRV (Server Selection).

-	ATMA (ATM Address).

-	NAPTR (Naming Authority Pointer).

-	KX (Key Exchange).

-	CERT (Certification record).

-	A6 (IPv6 address (deprecates AAAA)).

-	DNAME (Non-terminal DNAME (for IPv6)).

-	SINK (Kitchen sink (experimental)).

-	OPT (EDNS0 option (meta-RR).

-	TKEY (Transaction key).

-	TSIG (Transaction signature).

-	IXFR (Incremental zone transfer).

-	AXFR (Transfer zone of authority).

-	MAILB (Transfer mailbox records).

-	MAILA (Transfer mail agent records).

-	ANY (Wildcard match).


Type of Service

Type of service provides an indication of the abstract parameters of the quality of service desired. These parameters are to be used to guide the selection of the actual service parameters when transmitting a datagram through a particular network. Several networks offer service precedence, which somehow treats high precedence traffic as more important than other traffic. The major choice is a three-way tradeoff between low-delay, high-reliability, and high throughput. This value is 8bit value and its syntax is given below.

Bits 0…2: Precedence.

Bit 3: 0 = Normal Delay, 1 = Low Delay.

Bit 4: 0 = Normal Throughput, 1 = High Throughput

Bit 5: 0 = Normal Reliability, 1 = High Reliability.

Bit 6…7: Reserved for future Use.

Precedence

111 Network Control

110 Internetwork Control

101 CRITIC/ECP

100 Flash Override

011 Flash

010 Immediate

001 Priority

000 Routine


IP Statistics

IP Forwarding

The indication of whether this entity is acting as an IP gateway in respect to the forwarding of datagrams received by, but not addressed to, this computer.  IP gateways forward datagrams; Hosts do not (except those Source-Routed via the host).

Default Time-To-Live Value Received

The default value inserted into the Time-To-Live field of the IP header of datagrams originated at this computer, whenever a TTL value is not supplied by the transport layer protocol.

Packets Received

The total number of input datagrams received from interfaces, including those received in error.

Received Header Errors

The number of input datagrams discarded due to errors in their IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors discovered in processing their IP options, etc.

Received Address Errors

The number of input datagrams discarded because the IP address in their IP header's destination field was not a valid address to be received at this computer.  This count includes invalid addresses (e.g., 0.0.0.0) and addresses of unsupported Classes (e.g., Class E).  For entities that are not IP Gateways and therefore do not forward datagrams, this counter includes datagrams discarded because the destination address was not a local address.

Datagrams Forwarded

The number of input datagrams for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination.  In entities that do not act as IP Gateways, this counter will include only those packets, which were Source-Routed via this entity, and the Source-Route option processing was successful.

Unknown Protocols Received

The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol.

Received Packets Discarded

The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but which were discarded (e.g. for lack of buffer space).  Note that this counter does not include any datagrams discarded while awaiting re-assembly.

Received Packets Delivered

The total number of input datagrams successfully delivered to IP user-protocols (includes ICMP).

Output Requests

The total number of IP datagrams that local IP user-protocols (including ICMP) supplied to IP in requests for transmission.  Note that this counter does not include any datagrams counted in Datagrams Forwarded.

Discarded Output Packets

The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but which were discarded (e.g., for lack of buffer space).  Note that this counter would include datagrams counted in Datagrams Forwarded if any such packets met this (discretionary) discard criterion.

Output Packet No Route

The number of IP datagrams discarded because no route could be found to transmit them to their destination.  Note that this counter includes any packets counted in Datagrams Forwarded which meet this "no-route" criterion.

Reassembly Timeout Value

The maximum number of seconds that received fragments are held while they are awaiting reassembly at this entity.

Reassembly Required

The number of IP fragments received which needed to be reassembled at this computer.

Reassembly Successful

The number of IP datagrams successfully re-assembled.

Reassembly Failures

The number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors, etc).

Note that this is not necessarily a count of discarded IP fragments.

Datagrams Successfully Fragmented

The number of IP datagrams that have been successfully fragmented at this computer.

Datagrams Failing Fragmentations

The number of IP datagrams that have been discarded because they needed to be fragmented at this entity but could not be, e.g., because their "Don't Fragment" flag was set.

Fragments Created

The number of IP datagram fragments that have been generated as a result of fragmentation at this entity.


ICMP Statistics

Received Messages

The total number of ICMP messages which the computer received.  Note that this counter includes all those counted by Received Errors.

Received Errors

The number of ICMP messages which the entity received but determined as having errors (bad ICMP checksums, bad length, etc.).

Received Destination Unreachable

The number of ICMP Destination Unreachable messages received.

Received Time Exceeded

The number of ICMP Time Exceeded messages received.

Received Parameter Problems

The number of ICMP Parameter Problem messages received.

Received Source Quenches

The number of ICMP Source Quench messages received.

Received ICMP Redirects

The number of ICMP Redirect messages received.

Received Echoes

The number of ICMP Echo (request) messages received.

Received Echo Replies

The number of ICMP Echo Reply messages received.

Received Timestamps

The number of ICMP Timestamp (request) messages received.

Received Timestamp Replies

The number of ICMP Timestamp Reply messages received.

Received Address Masks

The number of ICMP Address Mask Request messages received.

Received Address Masks

The number of ICMP Address Mask Reply messages received.

Sent Messages

The total number of ICMP messages which this computer attempted to send.  Note that this counter includes all those counted by Sent Errors.

Sent Errors

The number of ICMP messages that this computer did not send due to problems discovered within ICMP such as a lack of buffers.  This value should not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram.

Sent Destination Unreachable

The number of ICMP Destination Unreachable messages sent.

Sent Time Exceeded

The number of ICMP Time Exceeded messages sent.

Sent Parameter Problems

The number of ICMP Parameter Problem messages sent.

Sent Source Quenches

The number of ICMP Source Quench messages sent.

Sent ICMP Redirects

The number of ICMP Redirect messages sent.

Sent ICMP Echoes

The number of ICMP Echo (request) messages sent.

Sent ICMP Echo Replies

The number of ICMP Echo Reply messages sent.

Sent ICMP Timestamps

The number of ICMP Timestamp (request) messages sent.

Sent ICMP Timestamp Replies

The number of ICMP Timestamp Reply messages sent.

Sent ICMP Address Masks

The number of ICMP Address Mask Request messages sent.

Sent ICMP Address Mask Replies

The number of ICMP Address Mask Reply messages sent.


TCP Statistics

Retransmission time-out Algorithm

The algorithm used to determine the timeout value used for retransmitting unacknowledged bytes.

Can be one of the following:

-	None of the following

-	A constant retransmission time-out.

-	MIL-STD-1778, Appendix B.

-	Van Jacobson's algorithm.

Min. retransmission timeout

The minimum value permitted by a TCP implementation for the retransmission timeout, measured in milliseconds.  More refined semantics for objects of this type depend upon the algorithm used to determine the retransmission timeout.

Max. retransmission timeout

The maximum value permitted by a TCP implementation for the retransmission timeout, measured in milliseconds.  More refined semantics for objects of this type depend upon the algorithm used to determine the retransmission timeout.

Max. Connections

The limit on the total number of TCP connections this computer can support.

Active Opens

The number of times TCP connections have made a direct transition to the SYN-SENT state from the CLOSED state.

Passive Opens

The number of times TCP connections have made a direct transition to the SYN-RCVD state from the LISTEN state.

Failed Connection Attempts

The number of times TCP connections have made a direct transition to the CLOSED state from either the SYN-SENT state or the SYN-RCVD state, plus the number of times TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state.

Reset Connections

The number of times TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state.

Current Connections

The number of TCP connections for which the current state is either ESTABLISHED or CLOSE-WAIT.

Segments Received

The total number of segments received, including those received in error.  This count includes segments received on currently established connections.

Segments Sent

The total number of segments sent, including those on current connections but excluding those containing only retransmitted bytes.

Segments Retransmitted

The total number of segments retransmitted - that is, the number of TCP segments transmitted containing one or more previously transmitted bytes.


UDP Statistics

Datagrams Received

The total number of UDP datagrams delivered to UDP users.

No Ports

The total number of received UDP datagrams for which there was no application at the destination port.

Received Errors

The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.

Datagrams Sent

The total number of UDP datagrams sent from this computer.


IP Routing

IP Routing tool displays information about every route presently known to this computer.

Destination Address

The destination IP address of this route.  An entry with a value of 0.0.0.0 is considered a default route.  Multiple such default routes can appear in the table, but access to such multiple entries is dependent on the table-access mechanisms defined by the network management protocol in use.

Interface Index

The index value which uniquely identifies the local interface through which the next hop of this route should be reached.  The interface identified by a particular value of this index is the same interface as identified by the same value of Interface Index (see Interfaces).

Metric1

The primary routing metric for this route.  The semantics of this metric are determined by the routing-protocol specified in the route's Protocol value.

Metric2

An alternate routing metric for this route.  The semantics of this metric are determined by the routing-protocol specified in the route's Protocol value.

Metric3

An alternate routing metric for this route.  The semantics of this metric are determined by the routing-protocol specified in the route's Protocol value.

Metric4

An alternate routing metric for this route.  The semantics of this metric are determined by the routing-protocol specified in the route's Protocol value.

Next Hop

The IP address of the next hop of this route.

Type

The type of route.  Can be one of the following:

-	None of the following.

-	An invalidated route.

-	Route to directly connected (sub-)network

-	route to a non-local host/network/sub-network

Protocol

The routing mechanism via which this route was learned. Inclusion of values for gateway routing protocols is not intended to imply that hosts should support those protocols.  Can be one of the following:

-	None of the following.

-	Non-protocol information (manually configured entries).

-	Set via a network management protocol.

-	Obtained via ICMP (Redirect).

-	Egp gateway routing protocol.

-	Ggp gateway routing protocol.

-	Hello gateway routing protocol.

-	Rip gateway routing protocol.

-	Is-is gateway routing protocol.

-	Es-is gateway routing protocol.

-	CiscoIgrp gateway routing protocol.

-	BbnSpfIgp gateway routing protocol.

-	Oigp gateway routing protocol.

Age

The number of seconds since this route was last updated or otherwise determined to be correct.


Applications

Applications tool shows the status of the programs that are running on your computer.

If you double-click on an application item, MegaPing will switch to the Process tab, and will select a process information row for that item.

You can end a program by using “KillProcess” button.


Processes

The Processes tool shows information about the processes running on your computer.

Process - an executable program, such as Windows Explorer, a service, such as Event Log, or a subsystem, such as the subsystem for Windows 3.x applications.

You can display summary or detailed information on threads, memory usage, loaded modules, and a number of other parameters.


Modules

The Modules tool shows information about the modules that are loaded by running processes.

You can display version information and module usage by loaded processes.


Host Monitor Settings

Host Monitor settings page specifies current settings that every hostadded to the destination list will have.  Once host entries are added to the list, they can be modified for individual host.  See Host Monitor for details.

Scan Enabled

Specifies if host entries are available for scanning.

Interval between scans (seconds)

Specifies an interval between two scans.  For example, if interval is 20 seconds, MegaPing will send a query a host (and TCP/IP services if enabled) every 20 seconds.

Packet size

Specifies the send buffer size of Ping packets.

Retries Before Sending Notification

Specifies number of failed retries before executing specified alerts.

Timeout (seconds)

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

TTL

Specifies the Time to live field in the IP header to be sent.

Related topics

Host Monitor

Host Monitor Log

Host Monitor Alerts


Host Monitor

Host Monitor is a network tool that can monitor any number of TCP and UDP services simultaneously  (FTP, HTTP, POP3, SMTP, IMAP4, DNS, Echo, Telnet, and more) on multiple remote computers or verify if remote hosts are alive. When any of monitored services or remote machines are going down, or become available it can warn you with a sound (WAV file), a visual indication (change of the host appearance), or an email (SMTP) message with detailed information.  It can also shutdown, or restart remote machine (this feature is available only when MegaPing is running on Windows NT 4.0, Windows 2000, Windows XP, or newer platform).

To use the Host Monitor tool

1. Select the Host Monitor service from the service tree control.

2. Enter in the destination address text box the host name or IP address of the remote host (for example, www.microsoft.com).

3. To enter multiple hosts, click on Browse button and select hosts to be added.

4. When hosts are added they have configuration settings specified in Host Monitor Settings tab.  After hosts are added, clicking Configure button and modifying settings can customize each host’s settings.

5. Click Start.

6. To disable monitoring of a host from Destination address list simply click on Configure button, select settings tab and uncheck checkbox Scan Enabled.

7. To add ports for monitoring or remove ports from monitoring, click on Configure button and add or remove ports as necessary.

8. When host monitor is running, it saves results in the log file.  You can view it by pressing View Log File button.

9. During the monitoring, the Start button toggles to Stop. You can click Stop at any time to stop the monitoring.

Related topics

Host Monitor Settings

Host Monitor Log

Host Monitor Alerts


Host Monitor Log

Specific File

A single file will be used for log output.

This is a default selection.

Switch To New File Daily

Specifies that MegaPing will use a new log file every day.

Switch To New File Monthly

Specifies that MegaPing will use a new log file every month.

Save Data Only When Data Changes

Specifies that MegaPing will update a log file only when any of the following events occur:

-	Host Start Responding;

-	Host Stop Responding;

-	Port Opens;

-	Port Closes.

This is a default selection.

Save All Data

Specifies that all results are recorded.  Note, that the size of the log file increases significantly when this mode is selected.

Clear Log Before Scan

Specifies that all previous results will be deleted from the log file when button Start is pressed

Enable Log

Specifies whether to use log file.

Launch Browser

Specifies whether to launch a browser to view log file when scan is started or stopped.

Refresh Browser Window

Specifies whether to refresh a browser window when any new record is written to the log file

Clear Log

Clears the log file on demand

View Log

Spawn an associated browser to view the log file.

Use Defaults

Resets all log file settings back to default values.

Related topics

Host Monitor

Host Monitor Settings

Host Monitor Alerts


Host Monitor Alerts

MegaPing can alert the Network Administrator about following events:

-	Host stop Responding;

-	Host Start Responding;

-	Port Closes;

-	Port Opens.

MegaPing can notify the Network Administrator with following alerts:

-	Sound Alerts (it can play sound files);

-	Visual Alerts (Host item appearance will change);

-	Send email message.  MegaPing can even automatically identify SMTP servers to use.

-	Stop Monitoring;

-	Shutdown local or remote machine (available only if MegaPing is running on Windows NT, Windows 200, Windows XP, or later operating systems);

-	Restart local or remote machine (available only if MegaPing is running on Windows NT, Windows 200, Windows XP, or later operating systems);

Related topics

Host Monitor

Host Monitor Settings

Host Monitor Log


ARP

ARP tool displays information about the IP-to-Ethernet or token ring physical address translation tables used by the Address Resolution Protocol.


Shares

Shares tool displays information about each shared resource this computer, including hidden shares, and users connected to a share.
User can delete any selected share by clicking Delete Share button.

All current sessions associated with this share will be deleted


Sessions

Sessions tool displays information about sessions established on this computer.  Any selected session established by remote host can be deleted by clicking on Delete Session button.


Files

Files tool displays information about all open files on this computer.
Clicking on Close File button will close any file opened by remote computer.


Remote Resources

Remote Resources tool displays information about connections to remote shared resources.

Clicking on button Disconnect will disconnect any selected connected resource


IP Scanner

IP Scanner is a network tool that can scan any range of IP addresses to determine active remote hosts.

To use the IP Scanner tool just enter the staring IP address (From field) and ending IP address of the scan range (To field).

You can use Traceroute tool or WhoIs tool with any of the entries by right-clicking a host and selecting appropriate menu item.

MegaPing can merge scan results with any of the hosts lists used by clicking Merge Hosts button.

Results can be saved by clicking Save As button.

Related Topics

IP Scanner Settings


IP Scanner Settings

Retransmissions

Specifies number of Ping requests to send to each host.

Resolve Names

It enables an automatic lookup of the host name by IP address. This is to be able to supply the user with the host name. If the user does not need the name of the replying host, and wishes to decrease the network traffic this has to be unchecked.

Send buffer size

Specifies the send buffer size.

Timeout

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

Throughput

Specifies the maximum number of queries to be sent simultaneously.

This value can be decreased when computer is using slow connection to the Internet.

TTL

Specifies the Time to live field in the IP header to be sent.

Use Defaults

Resets all IP Scanner settings back to default values.


Share Scanner

Share scanner is a network tool that allows network administrators to scan any range of IP addresses for visible or unprotected shared network resources such as shared drives and printers.

To use the Share Scanner tool just enter the staring IP address (From field) and ending IP address of the scan range (To field).

You can use Traceroute tool or WhoIs tool with any of the entries by right-clicking a host and selecting appropriate menu item.

MegaPing can merge scan results with any of the hosts lists used by clicking Merge Hosts button.

Results can be saved by clicking Save As button.

Related Topics

Share Scanner Settings


Share Scanner Settings

Retransmissions

Specifies number of Ping requests to send to each host.

Resolve Names

It enables an automatic lookup of the host name by IP address. This is to be able to supply the user with the host name. If the user does not need the name of the replying host, and wishes to decrease the network traffic this has to be unchecked.

Send buffer size

Specifies the send buffer size.

Timeout

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

Throughput

Specifies the maximum number of queries to be sent simultaneously.

This value can be decreased when computer is using slow connection to the Internet.

TTL

Specifies the Time to live field in the IP header to be sent.

Use Defaults

Resets all IP Scanner settings back to default values.

Related Topics

Share Scanner


NetBIOS Scanner

NetBIOS scanner is a network tool that allows network administrators to scan any range of IP addresses and list computers offering NetBIOS name tables, and their MAC addresses.

To use the Share Scanner tool just enter the staring IP address (From field) and ending IP address of the scan range (To field).

You can use Traceroute tool or WhoIs tool with any of the entries by right-clicking a host and selecting appropriate menu item.

MegaPing can merge scan results with any of the hosts lists used by clicking Merge Hosts button.

Results can be saved by clicking Save As button.

Related Topics

NetBIOS Scanner Settings, NetBIOS Suffixes


NetBIOS Suffixes

All NetBIOS names are 16 characters in length. A NetBIOS suffix is the 16th character of the 16-character NetBIOS name. The NetBIOS suffix is used by Microsoft Networking software to identify functionality installed on the registered device.

The following table lists the NetBIOS suffixes that are used by Microsoft Windows NT. The suffixes are listed in hexadecimal format because many of them are unprintable otherwise.

Name                           Number(h)  Type  Usage

--------------------------------------------------------------------------

<computername>           	00       U    Workstation Service

<computername>         	01       U    Messenger Service

<\\--__MSBROWSE__> 	01       G    Master Browser

<computername>         	03       U    Messenger Service

<computername>         	06       U    RAS Server Service

<computername>         	1F       U    NetDDE Service

<computername>         	20       U    File Server Service

<computername>         	21       U    RAS Client Service

<computername>         	22       U    Microsoft Exchange Interchange (MSMail Connector)

<computername>         	23       U    Microsoft Exchange Store

<computername>         	24       U    Microsoft Exchange Directory

<computername>         	30       U    Modem Sharing Server Service

<computername>         	31       U    Modem Sharing Client Service

<computername>         	43       U    SMS Clients Remote Control

<computername>         	44       U    SMS Administrators Remote Control Tool

<computername>         	45       U    SMS Clients Remote Chat

<computername>         	46       U    SMS Clients Remote Transfer

<computername>         	4C       U    DEC Pathworks TCPIP service on Windows NT

<computername>         	42       U    mccaffee anti-virus

<computername>         	52       U    DEC Pathworks TCPIP service on Windows NT

<computername>         	87       U    Microsoft Exchange MTA

<computername>         	6A       U    Microsoft Exchange IMC

<computername>         	BE       U    Network Monitor Agent

<computername>         	BF       U    Network Monitor Application

<username>             	03       U    Messenger Service

<domain>               	00       G    Domain Name

<domain>               	1B       U    Domain Master Browser

<domain>               	1C       G    Domain Controllers

<domain>               	1D       U    Master Browser

<domain>               	1E       G    Browser Service Elections

<INet~Services>        	1C       G    IIS

<IS~computer name>    	 00       U    IIS

<computername>         	[2B]     U    Lotus Notes Server Service

IRISMULTICAST           	[2F]     G    Lotus Notes

IRISNAMESERVER         	[33]     G    Lotus Notes

Forte_$ND800ZA          	[20]     U    DCA IrmaLan Gateway Server Service

NetBIOS name types describe the functionality of the registration.

Unique (U): The name may have only one IP address assigned to it. On a network device multiple occurrences of a single name may appear to be registered. The suffix may be the only unique character in the name.

Group (G): A normal group; the single name may exist with many IP addresses. WINS responds to a name query on a group name with the limited broadcast address (255.255.255.255). Because routers block the transmission of these addresses, the Internet Group was designed to service communications between subnets.

Related Topics

NetBIOS Scanner, NetBIOS Scanner Settings


NetBIOS Scanner Settings

Timeout

Specifies the timeout value in seconds that is used to wait for a reply when a request packet is sent.

Throughput

Specifies the maximum number of queries to be sent simultaneously.

This value can be decreased when computer is using slow connection to the Internet.

Use Defaults

Resets all IP Scanner settings back to default values.

Related Topics

NetBIOS Scanner, NetBIOS Suffixes