This is the built-in help made by Microsoft for the command 'Add-NetEventPacketCaptureProvider', in PowerShell version 5 - as retrieved from
Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Adds a Remote Packet Capture provider.
Add-NetEventPacketCaptureProvider [-SessionName] <String> [[-IpProtocols] [<Byte[]>]] [[-TruncationLength] [<UInt16>]] [[-VmCaptureDirection] {Ingress | Egress |
IngressAndEgress}] [[-Level] [<Byte>]] [[-MatchAnyKeyword] [<UInt64>]] [[-MatchAllKeyword] [<UInt64>]] [[-CaptureType] {Physical | Switch | BothPhysicalAndSwitch}]
[[-MultiLayer] [<Boolean>]] [[-LinkLayerAddress] [<String[]>]] [[-EtherType] [<UInt16[]>]] [[-IpAddresses] [<String[]>]] [-CimSession [<CimSession[]>]] [-ThrottleLimit
[<Int32>]] [-Confirm] [-WhatIf] [<CommonParameters>]
The Add-NetEventPacketCaptureProvider cmdlet adds a Remote Packet Capture provider. You can only use one packet capture provider at a time and you must remove an existing
provider before you use this cmdlet to add a new provider. To remove an existing Remote Packet Capture provider, use the Remove-NetEventPacketCaptureProvider cmdlet.
<
Online Version: http://go.microsoft.com/fwlink/?LinkID=294382
Add-NetEventProvider
Get-NetEventPacketCaptureProvider
New-NetEventSession
Remove-NetEventPacketCaptureProvider
Set-NetEventPacketCaptureProvider
<
Example 1: Add a packet capture provider
PS C:\>New-NetEventSession -SessionName "Session01"
PS C:\> Add-NetEventProvider -Name "Microsoft-Windows-TCPIP" -SessionName "Session01"
PS C:\> Add-NetEventPacketCaptureProvider -SessionName "Session01"
This example adds a Remote Packet Capture provider to a session.
The first command uses the New-NetEventSession cmdlet to create a new session named Session01.
The second command adds a provider named Microsoft-Windows-TCPIP to the session named Session01 by using the Add-NetEventProvider cmdlet.
The third command adds a packet capture provider to the session.