netsh trace start capture=yes Ethernet.Type=IPv4 IPv4.Address=<ip> tracefile=<filepath>\<filename> 

netsh trace start capture=yes protocol=17 

You can make it persistent, e.g. if you want to capture the boot:

netsh trace start persistent=yes capture=yes tracefile=c:\trace.log

To stop enter

netsh trace stop

Capture ICMP traffic:

netsh trace start capture=yes protocol=1 tracefile=c:\temp\trace.etl fileMode=single maxSize=500