Netcap Overview

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Netcap.exe: Network Monitor Capture Utility

This command-line tool allows a system administrator to monitor packets on a LAN and write the information to a log file. NetCap uses the Network Monitor Driver to sniff packets on local network segments.


  • You must run NetCap from the command window.

  • If the Network Monitor Driver is not installed, NetCap installs it the first time the tool is run. To remove the driver, use netcap /remove.

Corresponding UI

This tool provides a command-line interface to some of the capture functionality of Netmon.


NetCap captures frames directly from the network traffic data stream so they can be examined. You can use it to create capture files for support personnel.

Frames are packages of information transmitted as a single unit over a network. Every frame follows the same basic organization and contains the following:

  • Control information such as synchronizing characters

  • Source and destination addresses

  • Protocol information

  • An error-checking value

  • A variable amount of data

System Requirements

NetCap requires one of the following operating systems:

  • Windows Server 2003

  • Windows XP Professional

  • Windows 2000

File Required

  • Netcap.exe

See Also


Netcap Remarks
Netcap Syntax
Netcap Examples
Alphabetical List of Tools
Spcheck Overview
Nltest Overview
Netdom Overview
Netdiag Overview
Netcap Overview
Httpcfg Overview
Dnslint Overview
Dnscmd Overview
Dhcploc Overview
Dcdiag Overview
Browstat Overview