Hi,
Windows has a built in tool for network capturing.
List Adapter
pktmon comp list
Capture on interface with ID 8 , this save the packets to C:\Windows\System32\pktmon.etl
pktmon start --capture --comp 8 --pkt-size 0
Stop capturing
pktmon stop
Save as pcap format
pktmon etl2pcap C:\Windows\System32\pktmon.etl --out D:\trace.pcapng
Michael
Hi,
after an Upgrade from Windows 10 to Windows 11 on a customer PC sysprep is no longer working. Unfortunataly the error messages in C:\Windows\System32\sysprep\Panther\setuperr.log does not really help to find the root cause:
Error pGetUninstallInterfaceCommon: Failed loading the setupplatform, hr = 0x80070666 Error SYSPRP RemoveUninstall:Failed to instantiate uninstall interface; hr = 0x80070666 Error SYSPRP Sysprep_Clean_Opk:Failed to remove Uninstall; dwRet = 0x666 Error SYSPRP ActionPlatform::LaunchModule: Failure occurred while executing 'Sysprep_Clean_Opk' from C:\Windows\System32\spopk.dll; dwRet = 0x666 Error SYSPRP SysprepSession::ExecuteAction: Failed during sysprepModule operation; dwRet = 0x666 Error SYSPRP SysprepSession::ExecuteInternal: Error in executing action for Microsoft-Windows-Sysprep-SpOpk; dwRet = 0x666 Error SYSPRP SysprepSession::Execute: Error in executing actions from C:\Windows\System32\Sysprep\ActionFiles\Cleanup.xml; dwRet = 0x666 Error SYSPRP RunPlatformActions:Failed while executing Sysprep session actions; dwRet = 0x666 Error [0x0f0070] SYSPRP RunDlls:An error occurred while running registry sysprep DLLs, halting sysprep execution. dwRet = 0x666 Error [0x0f00a8] SYSPRP WinMain:Hit failure while processing sysprep cleanup providers; hr = 0x80070666 Error [0x0f0060] SYSPRP ParseCommands:Found unsupported command line option '/?' Error [0x0f00a4] SYSPRP WinMain: Unable to parse command-line arguments to sysprep; GLE = 0x0 Error [0x0f0060] SYSPRP ParseCommands:Found unsupported command line option '/?' Error [0x0f00a4] SYSPRP WinMain: Unable to parse command-line arguments to sysprep; GLE = 0x0
Continue reading Windows: sysprep fails with “Failure occurred while executing ‘Sysprep_Clean_Opk’ “
Hi,
the powershell has a “slimmed down intellisense” to complete commandlet names, functions, .NET types etc.
Continue reading Windows Powershell: CTRL-Space is no longer working
Hi,
event tracing files, for example produced by wusa.exe log parameter, are binary files. The powershell command let Get-WinEvent couldn’t open it but Windows Eventviewer is able to read those files.
There is also an option to convert ETL files.
Continue reading Windows: Convert an ETL (Event tracing file) into a human readable format
Hi,
these are TCP client and server which can simply used for testing if a specific TCP port is open