Trace:

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
ms:win:trace [2019/11/04 15:39] – jsms:win:trace [2019/11/04 15:39] (current) – js
Line 4: Line 4:
  
 You have to load the etl file to "Microsoft Network Monitor" and export it to cap. You have to load the etl file to "Microsoft Network Monitor" and export it to cap.
-On the website [[http://www.tech-wiki.net/index.php?title=How_to_capture_traffic_with_no_Wireshark_using_netsh]] I found the following powershell code to convert it:+ 
 +On the website [[http://www.tech-wiki.net/index.php?title=How_to_capture_traffic_with_no_Wireshark_using_netsh]]  
 + 
 +I found the following powershell code to convert it:
 <code powershell>$s = New-PefTraceSession -Path “C:\temp\OutFile.Cap” -SaveOnStop <code powershell>$s = New-PefTraceSession -Path “C:\temp\OutFile.Cap” -SaveOnStop
 $s | Add-PefMessageProvider -Provider “C:\temp\capture.etl” $s | Add-PefMessageProvider -Provider “C:\temp\capture.etl”

Page Tools