Microsoft Knowledge Base Article 812953 contains the following summary:
This article discusses several best practices to use when
you use Microsoft Network Monitor (Netmon.exe) to capture network traffic.
A network trace that has any of the following characteristics may prevent the successful analysis of captured network traffic:
|•||The network trace does not contain all the necessary network traffic.|
|•||It contains too much unnecessary network traffic.|
|•||It is not accompanied by computer name and address information of the affected computers.|