microsoft / perfview

PerfView is a CPU and memory performance-analysis tool
http://channel9.msdn.com/Series/PerfView-Tutorial
MIT License
4.06k stars 695 forks source link

Feature Request: Capturing Network Traffic via Packet Monitor #1489

Open yang-er opened 2 years ago

yang-er commented 2 years ago

Packet Monitor (PktMon) was introduced since Windows 10.0.19041.

Will PerfView support that?

brianrob commented 2 years ago

@yang-er, there aren't any current plans to do something specific around Packet Monitor, but it looks like Packet Monitor produces an ETL file that is consumable via NetMon, and PerfView should already be able to open this ETL file. Is that what you're looking for?

yang-er commented 2 years ago

As my understand, currently PerfView would combine the netsh trace result and standard ETL result into one ETL file.

So here I am thinking about getting a combined ETL file with standard ETL events (Kernel, Process, etc) and PktMon ETL events.

Malcolm-Stewart commented 1 year ago

Insight Client should be able to view traces combining multiple event providers and format them into a text file. NETMON can do this, as well, but events that require TMF files for metadata won't be formatted properly.