PowerShell Logo Small

Add-NetEventPacketCaptureProvider



This is the built-in help made by Microsoft for the command 'Add-NetEventPacketCaptureProvider', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Adds a Remote Packet Capture provider.

SYNTAX


Add-NetEventPacketCaptureProvider [-SessionName] <String> [[-IpProtocols] [<Byte[]>]] [[-TruncationLength] [<UInt16>]] [[-VmCaptureDirection] {Ingress | Egress |
IngressAndEgress}] [[-Level] [<Byte>]] [[-MatchAnyKeyword] [<UInt64>]] [[-MatchAllKeyword] [<UInt64>]] [[-CaptureType] {Physical | Switch | BothPhysicalAndSwitch}]
[[-MultiLayer] [<Boolean>]] [[-LinkLayerAddress] [<String[]>]] [[-EtherType] [<UInt16[]>]] [[-IpAddresses] [<String[]>]] [-CimSession [<CimSession[]>]] [-ThrottleLimit
[<Int32>]] [-Confirm] [-WhatIf] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Add-NetEventPacketCaptureProvider cmdlet adds a Remote Packet Capture provider. You can only use one packet capture provider at a time and you must remove an existing
provider before you use this cmdlet to add a new provider. To remove an existing Remote Packet Capture provider, use the Remove-NetEventPacketCaptureProvider cmdlet.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkID=294382
Add-NetEventProvider
Get-NetEventPacketCaptureProvider
New-NetEventSession
Remove-NetEventPacketCaptureProvider
Set-NetEventPacketCaptureProvider

REMARKS

<

Examples


Example 1: Add a packet capture provider

PS C:\>New-NetEventSession -SessionName "Session01"
PS C:\> Add-NetEventProvider -Name "Microsoft-Windows-TCPIP" -SessionName "Session01"
PS C:\> Add-NetEventPacketCaptureProvider -SessionName "Session01"



This example adds a Remote Packet Capture provider to a session.

The first command uses the New-NetEventSession cmdlet to create a new session named Session01.

The second command adds a provider named Microsoft-Windows-TCPIP to the session named Session01 by using the Add-NetEventProvider cmdlet.

The third command adds a packet capture provider to the session.