etl2pcapng

etl2pcapng 1.11.0

This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method (WinPcap, which was included with older versio

Download for Windows

About etl2pcapng

This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method (WinPcap, which was included with older versions of Wireshark), these inbox tools should be preferred.

Technical details

PublisherMicrosoft
Version1.11.0
Release date2023-10-26
LicenseMIT
Installer typeportable
Architecturex64
Package IDMicrosoft.etl2pcapng

Install etl2pcapng from the command line

Install with Windows Package Manager
winget install --id=Microsoft.etl2pcapng -e
Update to the latest version
winget upgrade --id=Microsoft.etl2pcapng -e
Uninstall
winget uninstall --id=Microsoft.etl2pcapng -e

etl2pcapng adds this command to the command line: etl2pcapng.

pktmonndiscapwiresharkwinpcapetlfilesetl-filesrequirescdm

Frequently asked questions

Is etl2pcapng free?

Yes. etl2pcapng is free and open-source software released under the MIT license.

What is the latest version of etl2pcapng?

The latest version is 1.11.0, released on Oct 26, 2023.

Is it safe to download etl2pcapng?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with c2d03aac43ea0f5626fc8d909e6688393feaf71bd6facd39aaf8a637382d9043.

Which Windows versions does etl2pcapng support?

etl2pcapng runs on Windows and is available for 64-bit (x64) systems.

How do I uninstall etl2pcapng?

Open Settings › Apps › Installed apps, find etl2pcapng and select Uninstall. From the command line, run winget uninstall --id=Microsoft.etl2pcapng -e.

Is there a portable version of etl2pcapng?

Yes. etl2pcapng is available as a portable program (etl2pcapng.exe, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.