4 ms·
You can use netsh trace to perform packet captures, and convert them to pcapng format. Real common for server workloads (where I don't recommend installing Wire
by spydum 5y ago
You can use netsh trace to perform packet captures, and convert them to pcapng format. Real common for server workloads (where I don't recommend installing Wireshark.. analysis should not be done on the server, in case any type of vuln in Wireshark could be abused)
- adzm 5y agoThis is amazing! https://github.com/microsoft/etl2pcapng https://github.com/microsoft/etl2pcapng microsoft's etl2pcapng tool appears to be the tool of choice to convert it.