Windows

pktmon

SafeBuilt-in packet capture

pktmon start -c --pkt-size 0

Native capture; convert with etl2pcapng for Wireshark. A lifesaver where installs are forbidden.

Examples

  • pktmon stop && pktmon etl2pcapng PktMon.etlStop and convert to pcap

Syntax

pktmon start -c / pktmon stop / pktmon etl2pcapng <etl>

Before you run it

Capture only; handle data carefully.

Related commands

The same reference, with no signal at all

Every command and flow from this site, held on your device and searchable with no connection. Free to install, no ads.

Get it free on the App Store