pktmon etl2pcap

Applies to: Windows Server 2022, Windows Server 2019, Windows 10, Azure Stack HCI, Azure Stack Hub, Azure

Convert pktmon log file to pcapng format. Dropped packets are not included by default.

Syntax

pktmon etl2pcap <file> [--out <name>] [--drop-only] [--component-id <id>]

Where <file> is the ETL file to convert.

Parameters

Parameter Description
-o, --out <name> Name of the formatted pcapng file.
-d, --drop-only Convert dropped packets only.
-c, --component-id <id> Filter packets by a specific component ID.

Additional References