
Support
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to collect a packet capture on Windows without Wireshark
Last Update:
May 10, 2021 3:09:24 AM
Updated By:
Created date:
May 7, 2021 9:16:31 AM
Environment:
- Wireshark
- Microsoft Windows Server 2012 and later
- Qlik Sense Enterprise on Windows
- QlikView
- Qlik NPrinting
Qlik Technical Support has requested a packet capture, but your security policy or a warranty restriction prevents you from installing Wireshark.
Resolution:
Use the following steps to generate a packet capture in Windows 2012 and later.
- Open a command-line session using Run as administrator.
- Start the capture:
Type netsh trace start capture=yes protocol=TCP and press Enter.
NOTE: View the command output. The output lists where the capture is saved. - Keep the command-line session open.
- Reproduce your issue.
NOTE: Technical Support strongly recommends that you list all IP addresses and hosts used in the session. - Return to the open session or open a new command-line session using Run as administrator.
- Stop the packet capture:
Type netsh trace stop and press Enter. - Navigate to the folder the session listed as the output location.
The capture file is in ETL (Microsoft Tracelog) format. - Copy the files from the output directory and send them to Qlik Technical Support.
9,677 Views