This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method (WinPcap, which was included with older versio
This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method (WinPcap, which was included with older versions of Wireshark), these inbox tools should be preferred.
Technical details
Publisher
Microsoft
Version
1.11.0
Release date
2023-10-26
License
MIT
Installer type
portable
Architecture
x64
Package ID
Microsoft.etl2pcapng
Install etl2pcapng from the command line
Install with Windows Package Manager
winget install --id=Microsoft.etl2pcapng -e
Update to the latest version
winget upgrade --id=Microsoft.etl2pcapng -e
Uninstall
winget uninstall --id=Microsoft.etl2pcapng -e
etl2pcapng adds this command to the command line: etl2pcapng.
Yes. etl2pcapng is free and open-source software released under the MIT license.
What is the latest version of etl2pcapng?
The latest version is 1.11.0, released on Oct 26, 2023.
Is it safe to download etl2pcapng?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with c2d03aac43ea0f5626fc8d909e6688393feaf71bd6facd39aaf8a637382d9043.
Which Windows versions does etl2pcapng support?
etl2pcapng runs on Windows and is available for 64-bit (x64) systems.
How do I uninstall etl2pcapng?
Open Settings › Apps › Installed apps, find etl2pcapng and select Uninstall. From the command line, run winget uninstall --id=Microsoft.etl2pcapng -e.
Is there a portable version of etl2pcapng?
Yes. etl2pcapng is available as a portable program (etl2pcapng.exe, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Alternatives to etl2pcapng
Other Networking programs for Windows from different developers.