microsoft / etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.
MIT License
607 stars 114 forks source link

Converted 0 frames #30

Closed markuchi closed 3 years ago

markuchi commented 3 years ago

Using version 1.4. Server 2019, always says converted 0 frames.

johnmagee-waystar commented 3 years ago

Windows 10 same issue with converted 0 frames

brianlance commented 3 years ago

Windows 10 here with the same issue. Tried 1.3.0 and got the same results.

Sleepw4lker commented 3 years ago

I first thought that I also ran into this issue but apparently the same happened when I tried to convert my etl files with Start-PefTraceSession from Message Analyzer. Turned out that my etl files just didnt contain any Network Packets, probably because my timeframe for the netsh trace was too short. Worked when being a little more patient during the netsh trace.

Kreijstal commented 3 years ago

Windows 10 as well, converted 0 frames.

csujedihy commented 3 years ago

Can anyone of you share an etl file?