PowerShell Logo Small

Stop-NetEventSession



This is the built-in help made by Microsoft for the command 'Stop-NetEventSession', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Stops event and packet capture for a network event session.

SYNTAX


Stop-NetEventSession [-CimSession [<CimSession[]>]] [-PassThru] [-ThrottleLimit [<Int32>]] [-Confirm] [-WhatIf] [<CommonParameters>]
Stop-NetEventSession [-Name] <String[]> [-CimSession [<CimSession[]>]] [-PassThru] [-ThrottleLimit [<Int32>]] [-Confirm] [-WhatIf] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Stop-NetEventSession cmdlet stops event and packet capture for network event session. A session controls how the computer logs events and, optionally, network traffic,
or packets. Use the New-NetEventSession cmdlet to create a session. A network event provider logs events and network traffic as Event Tracing for Windows (ETW) events.


Use the Start-NetEventSession to start a session. You cannot stop a session unless it is currently running.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkID=294406
Get-NetEventSession
New-NetEventSession
Remove-NetEventSession
Set-NetEventSession
Start-NetEventSession
Add-NetEventProvider

REMARKS

<

Examples


Example 1: Stop a session

PS C:\>New-NetEventSession -Name "Session38"
PS C:\> Add-NetEventProvider -Name "Microsoft-Windows-TCPIP" -SessionName "Session38"
PS C:\> Start-NetEventSession -Name "Session38"
PS C:\> Stop-NetEventSession -Name "Session38"



This example creates a session, adds a provider to it, and then starts and stops the session.

The first command creates a session named Session38 by using the New-NetEventSession cmdlet.

The second command adds a provider to the session by using the Add-NetEventProvider cmdlet. A session must have a provider in order to log events.

The third command starts the session named Session38 by using the Start-NetEventSession cmdlet.

The fourth command stops the session named Session38.