GitHub - microsoft/etl2pcapng: Utility that converts an .etl file
https://github.com/microsoft/etl2pcapng
This tool enables you to view ndiscap packet captures with Wireshark. Windows ships with an inbox packet capture component called "ndiscap," which is implementedas an ETW trace provider. Due to performance problems with the other popular packet capturemethod (WinPcap, which was included with older versions of Wireshark), ndiscap should bepreferred....
This tool enables you to view ndiscap packet captures with Wireshark. Windows ships with an inbox packet capture component called "ndiscap," which is implementedas an ETW trace provider. Due to performance problems with the other popular packet capturemethod (WinPcap, which was included with older versions of Wireshark), ndiscap should bepreferred....
DA: 55 PA: 28 MOZ Rank: 34