Trace: Network

Create & Start Network Trace

New-NetEventSession -Name "net_trace" -CaptureMode SaveToFile -LocalFilePath "C:\temp\<TRACE_NAME>.etl"
Add-NetEventPacketCaptureProvider -SessionName "net_trace" -Level 4 -CaptureType Physical
Start-NetEventSession -Name "net_trace"

Stop & Remove Network Trace

Stop-NetEventSession -Name "net_trace"
Remove-NetEventSession -Name "net_trace"
 
#To read the .ETL File use Microsoft Message Analyzer