Tinus EngOps Wiki

Logo

OpsaC - Operating as PowerShell code

Links

Home

PowerShell Blog

PowerShell Index

PowerShell Search

Additional Websites

View my GitHub Profile

View my GitHub Gists

View Tinus IT Wiki

View my Photo Website

Network Trace

tags: PowerShell categories: PowerShell-Network

Table of Contents

Netsh

Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2

Reference: Network Shell (Netsh)

netsh trace start persistent=yes capture=yes tracefile=c:\temp\nettrace-boot.etl
netsh trace stop

[Top]

Pktmon

Windows Server 2022, Windows Server 2019

Reference: Packet Monitor (Pktmon)

pktmon start -c
pktmon stop
pktmon pcapng C:\tmp\PktMon.etl

[Top]

NetEventPacketCapture

Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2

Reference: NetEventPacketCapture

New-NetEventSession -Name 'Session1'
$session = New-NetEventSession -Name 'Session1'
$session.LocalFilePath
New-NetEventSession -Name 'Session1'
Add-NetEventProvider -Name 'Microsoft-Windows-TCPIP' -Name 'Session1'
Start-NetEventSession -Name 'Session1'
Stop-NetEventSession -Name 'Session1'
$log = Get-WinEvent -Path $session.LocalFilePath Oldest
$log | select Message -First 5

[Top]