netsh trace start capture=yes tracefile=C:\Users\Administrator\Documents\cap.etl
netsh trace stop
https://github.com/microsoft/etl2pcapng
etl2pcapng.exe in.etl out.pcapng
Last updated 7 months ago