Command Line Parameters
es_netcap_svc_x64.exe /list /dumpbuffer /setdumpdir=<dumpdir> /setbufsize=<BufferSizeMB> /setinterfacetype=<0|1> /setinterface=<InterfaceGUID>
/list |
Lists all active network adapters |
/dumpbuffer |
Dumps the network packets currently stored in the memory buffer to the configured dump directory. |
/setdumpdir= |
Configures the dump directory |
/setbufsize= |
Configures the buffer size (in MB) |
/setinterface= |
Configures the network interface |
/setinterfacetype= |
Sets the interface type to either Ethernet (default) or Raw IP |
|
Configuration changes will become effective after a restart of the es_netcap_svc service. |
Examples
Example 1: Set the buffer size to 100MB and set the dump directory to C:\PCAP
es_netcap_svc_x64.exe /setbufsize=100
es_netcap_svc_x64.exe /setdumpdir=c:\pcap
net stop es_netcap_svc
net start es_netcap_svc
Example 2: Dump the memory buffer
es_netcap_svc_x64.exe /dumpbuffer
Example 3: Set the interface as well as interface type to "Raw IP"
es_netcap_svc_x64.exe /setinterfacetype=1 /setinterface={845E6FAB-C1BE-4F21-8374-674E886AD87B}