Wireshark-bugs: [Wireshark-bugs] [Bug 6694] Netsh .etl files are treated as packetlogger files;
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 17 Jun 2014 22:05:44 +0000

changed bug 6694

What Removed Added
CC   KenHo@Microsoft.Com

Comment # 12 on bug 6694 from 
Note: The issue reading .cap files appears to be resolved the only issue left
is natively reading .etl files into Wireshark.

The .ETL format from the output of the Windows netsh trace command is discussed
here:
http://msdn.microsoft.com/en-us/library/windows/desktop/dd815339(v=vs.85).aspx

This can be coordinated with myself and Paul.Long@microsoft.com

To create a trace on a Windows 7 orR2 server (and above) enter the following
commands:
C:\>netsh trace start capture=yes maxsize=2048 report=yes tracefile=test.etl
scenario=internetclient
Trace configuration:
<snip>
To stop the trace:
C:\>netsh trace stop
Warning: Some events were not captured due to high volume of events.
<snip>

You are receiving this mail because:
  • You are watching all bug changes.