Feature Request: Capturing Network Traffic via Packet Monitor

[yang-er]

Packet Monitor (PktMon) was introduced since Windows 10.0.19041.

Will PerfView support that?

[brianrob]

@yang-er, there aren't any current plans to do something specific around Packet Monitor, but it looks like Packet Monitor produces an ETL file that is consumable via NetMon, and PerfView should already be able to open this ETL file. Is that what you're looking for?

[yang-er]

As my understand, currently PerfView would combine the netsh trace result and standard ETL result into one ETL file.

So here I am thinking about getting a combined ETL file with standard ETL events (Kernel, Process, etc) and PktMon ETL events.

[Malcolm-Stewart]

Insight Client should be able to view traces combining multiple event providers and format them into a text file. NETMON can do this, as well, but events that require TMF files for metadata won't be formatted properly.