NETMON& TCP chimney

NMCap /network * /capture  /file c:\folder\t.chn:1MB 

NMCap /network * /capture (IPv4.SourceAddress == local ip address) and  (Ipv4.DestinationAddress == remote ip address) /file c:\folder\backup.cap:1MB

 

The effect of TCP Chimney offload on viewing network traffic

http://blogs.technet.com/b/networking/archive/2008/11/14/the-effect-of-tcp-chimney-offload-on-viewing-network-traffic.aspx

Information about the TCP Chimney Offload, Receive Side Scaling, and Network Direct Memory Access features in Windows Server 2008

http://support.microsoft.com/kb/951037

 http://www.symantec.com/business/support/index?page=content&id=TECH197934

http://www.cnblogs.com/awpatp/archive/2010/02/08/1666133.html