Hi,

Windows has a built in tool for network capturing.

List Adapter

pktmon comp list

Capture on interface with ID 8 , this save the packets to C:\Windows\System32\pktmon.etl

pktmon start --capture --comp 8 --pkt-size 0

Stop capturing

pktmon stop

Save as pcap format

pktmon etl2pcap C:\Windows\System32\pktmon.etl --out D:\trace.pcapng

Michael