the lan manager development team had one shared hardware-based analyzer at the time. netmon was conceived when the hardware analyzer was taken during a test to reproduce a networking bug, and the first windows prototype was coded over the christmas holiday. the first 4 bytes of the netmon capture file format were used to validate the file. the values were 'rtss' for ray, tom, steve, and steve - the first four members of the team. the code was originally written for os/2 and had no user interface; a symbol was placed in the device driver where the packet buffers were kept so received data could be dumped in hex from within the kernel debugger.