microsoft / etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.
MIT License
607 stars 114 forks source link

Additional data in comment. Add process name with PID in comment #66

Closed ToddMaxey closed 1 year ago

maolson-msft commented 1 year ago

This would be very useful info to have in some cases. But unfortunately it isn't possible without major caveats, since the ETL file may not be converted on the same system on which it was collected, and since the relevant processes may have closed.