MZ@ !L!This program cannot be run in DOS mode. $Rؕ3}3}3}H̴3}H̱3}Rich3}PEL!  H"@.rsrc@@H8P (x@~Xp0H`xP(8HXhx(88@x|2f4^D:v;FC_!8؈hFЎ4<@ДMUIMINIREPORTTEMPLATE.HTMLT5E#|6& +7d>wL+. MUI zh-CNRQcS0cO z^Tߍ*r`0 /TRߍ*0  %1!s! _Yߍ*0 (ul: trace start [[scenario=]<scenario1,scenario2>] [[globalKeywords=]keywords] [[globalLevel=]level] [[capture=]yes|no] [[capturetype=]physical|vmswitch|both] [[report=]yes|no|disabled] [[persistent=]yes|no] [[traceFile=]path\filename] [[maxSize=]filemaxsize] [[fileMode=]single|circular|append] [[overwrite=]yes|no] [[correlation=]yes|no|disabled] [capturefilters] [[provider=]providerIdOrName] [[keywords=]keywordMaskOrSet] [[level=]level] [[[provider=]provider2IdOrName] [[providerFilter=]yes|no]] [[keywords=]keyword2MaskOrSet] [[perfMerge=]yes|no] [[level=]level2] ... ؞f:y /ecvsQ.W[T~+R0 Uc[{ hV: S g(WO(u capture=yes >f_/T(uUce Mb/ecUc[{ hV0O(u "netsh trace show CaptureFilterHelp" SN>f:y /ecvUc[{ hVSvQ(ulvRh0 cO z^[{ hV: Y*NcO z^/eccO z^[{ hV v^N(Wk*NcO z^KNTO(u providerFilter=Yes /T(uNُN[{ hV0 O(u "netsh trace show ProviderFilterHelp" SN>f:y k*NcO z^/ecvcO z^[{ hVSvQ(ulvRh0\Pbkߍ*0 ' %1!s! \Pbkߍ*0 Yl: \PbkS_MRck(WۏLߍ*O݋vQ~ \ߍ*eNlbc:N HTML bJT0  %1!s! \ߍ*eNlbc:N HTML bJT0 (ul: convert [input=]tracefilename.etl [[output=]filename] [[dump=]CSV|XML|EVTX|TXT|No] [[report=]yes|no] [[overwrite=]yes|no] [[tmfpath=]pathname] Spe: h

[[namedAttribute=]<attributeValue>] [[saveSessionTrace=]<yes|no>] [[report=]<yes|no>] [[capture=]<yes|no>] ؞f:yߍ*Mn0  %1!s! >f:yߍ*Mn0 >f:yS(uveHh0 % %1!s! >f:ySNN start }TNNwO(uvS(ueHhRh0 >f:yeHhOo`0 %1!s! >f:yeHhOo`0 (ul: trace show scenario [name=]<scenarioname> Yl: [>f:y gsQg*NeHhvvQN Oo` Sb diagnose }TNS vNUO^\'`Tc[eHh/ec vcO z^RhNS\^(uv ؞sQ.W[T~+R0 >f:yS(uvcO z^0 PA( %1!s! >f:ySNN start }TNNwO(uvS(ucO z^vRh0 >f:ycO z^Oo`0 %1!s! >f:ySNN start }TNNwO(uvcO z^Oo`0 (ul: trace show provider [name=]<providerIdOrName> Yl: [>f:yc[cO z^/ecvsQ.W[ T~+R0SN(W/TRߍ*O݋e0 O(uُNsQ.W[T~+R RQhQ@\sQ.W[T~+R0 W %1!s! >f:ySNN start }TNNwO(uv hQ@\sQ.W[T~+RvRh0 (ul: trace show globalKeywordsAndLevels RQS(uvcS0 2 %1!s! >f:yQ~cSvRh0 (ul: trace show interfaces RQ/ecvUc[{ hVT(ul0 > %1!s! RQ/ecvUc[{ hVT(ul0 (ul: trace show CaptureFilterHelp >f:y.^R z^{|Oo`0 %1!s! >f:y.^R z^{| Ty0cNSN^\.^R z^{|vRh0 ؏RQ.^R z^{|SԏVvSv9h,gSV TO Y0 (ul: trace show helperclass [name=]<helperclassname> RQS/ecvcO z^[{ hVSvQ(ul0 : %1!s! RQS/ecvcO z^[{ hVSvQ(ul0 (ul: ߍ*>f:y ProviderFilterHelp PAK ߍ*Mn: ------------------------------------------------------------------- eNMOn = %1!s! S S(uveHh(%1!d!): ------------------------------------------------------------------- PA eQSp: %1!ws!  cO z^ --------- T S(uvcO z^(%1!d!) ------------------------------------------------------------------- % Ty: %1!s! cO z^ GUID: %2!s! W ~+R(f_ /T(uUceMb/ecUc[{ hV0/ecvUc[{ hV:N: CaptureInterface=<interface name or GUID> [c[vcS Tyb GUID /T(upencSUc0O(u  netsh trace show interfaces SRQS(ucS0 OY CaptureInterface={716A7812-4AEE-4545-9D00-C10EFD223551} OY CaptureInterface=!{716A7812-4AEE-4545-9D00-C10EFD223551} OY CaptureInterface="Local Area Connection" Ethernet.Address=<MAC address> Oc[[{ hVNnTvh MAC 0W@W9SM0 OY Ethernet.Address=00-0D-56-1F-73-64 Ethernet.SourceAddress=<MAC address> Oc[[{ hVNn MAC 0W@Wv9SM0 OY Ethernet.SourceAddress=00-0D-56-1F-73-64 Ethernet.DestinationAddress=<MAC address> Oc[[{ hVNvh MAC 0W@Wv9SM0 OY Ethernet.DestinationAddress=00-0D-56-1F-73-64 Ethernet.Type=<ethertype> Oc[[{ hVN MAC N*Y{|Wv9SM0 OY Ethernet.Type=IPv4 OY Ethernet.Type=NOT(0x86DD) OY Ethernet.Type=(IPv4,IPv6) Wifi.Type=<Management|Data> Oc[[{ hVN Wifi {|W9SM0AQv

Oc[[{ hVN IP OSv9SM0 OY Protocol=6 OY Protocol=!(TCP,UDP) OY Protocol=(4-10) IPv4.Address=<IPv4 address> Oc[[{ hVNn IPv4 0W@WTvh IPv4 0W@W9SM0 OY IPv4.Address=157.59.136.1 OY IPv4.Address=!(157.59.136.1) OY IPv4.Address=(157.59.136.1,157.59.136.11) IPv4.SourceAddress=<IPv4 address> Oc[[{ hVNn IPv4 0W@Wv9SM0 OY IPv4.SourceAddress=157.59.136.1 IPv4.DestinationAddress=<IPv4 address> Oc[[{ hVNvh IPv4 0W@Wv9SM0 OY IPv4.DestinationAddress=157.59.136.1 IPv6.Address=<IPv6 address> Oc[[{ hVNn IPv6 0W@WTvh IPv6 0W@W9SM0 OY IPv6.Address=fe80::5038:3c4:35de:f4c3\%%8 OY IPv6.Address=!(fe80::5038:3c4:35de:f4c3\%%8) IPv6.SourceAddress=<IPv6 address> Oc[[{ hVNn IPv6 0W@Wv9SM0 OY IPv6.SourceAddress=fe80::5038:3c4:35de:f4c3\%%8 IPv6.DestinationAddress=<IPv6 address> Oc[[{ hVNvh IPv6 0W@Wv9SM0 OY IPv6.DestinationAddress=fe80::5038:3c4:35de:f4c3\%%8 CustomMac=<type(offset,value)> Oc[[{ hVNN MAC h4Y_Yvc[ OPyϑv Oc[[{ hVNN IP h4Y_Yvc[ OPyϑv /T(uYB\pencSUc0 la: Uc[{ hV N/ecV0RhbBlS0 PacketTruncateBytes=<value> NUck*NpencSc[pevvW[0 la: Uc[{ hV N/ecV0RhbBlS0 OY PacketTruncateBytes=40 H la: SN TeO(uY*N[{ hV0FO/f NSN ͑ YO(uv Tv[{ hV0 OY 'netsh trace start capture=yes Ethernet.Type=IPv4 IPv4.Address=157.59.136.1' e >f_c[[{ hV0Yg*gc[ [{ hV R\Ɖ:N _eu 0 OY 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1' ُ\NN 157.59.136.1 -NUc IPv4 pencS ؏\UcwQ g^ IPv4 N*YQ{|WvpencS V:N *g>f_c[ Ethernet.Type [{ hV0 OY 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1 Ethernet.Type=IPv4' ُ\NN 157.59.136.1 -NUc IPv4 pencS0\>e_ wQ gvQNN*YQ{|WvpencS V:N]c[>f_ [{ hV0 Uc[{ hV/ecV0RhTBlS(d^SL c[)0 OY Range: 'netsh trace start capture=yes Ethernet.Type=IPv4 Protocol=(4-10)' ُ\UcOS(W 4 T10 KN(Sb 4 T 10)v IPv4 pencS0 OY List: 'netsh trace start capture=yes Ethernet.Type=(IPv4,IPv6)' ُ\NUc IPv4 T IPv6 pencS0 OY Negation: 'netsh trace start capture=yes Ethernet.Type=!IPv4' ُ\Uc@b g^ IPv4 *NpencS0 (WgN`Q NBlSSNNRh~T0 OY 'netsh trace start capture=yes Ethernet.Type=!(IPv4,IPv6)' ُ\Uc@b g^ IPv4 T^ IPv6 pencS0 SO(u NOT egNf ! Nc:yBlS0ُ \BlSv :Nc[v1uW/T(upencSUc0 O(u "Get-NetCompartment" RQS(u1uW0 la: dkcO z^[{ hV/ecR>NTBlS0 OY netsh trace start provider=Microsoft-Windows-Ras-NdisWanPacketCapture providerFilter=Yes RoutingDomain="{11111111-1111-1111-1111-111111111001}" OY netsh trace start provider=Microsoft-Windows-Ras-NdisWanPacketCapture providerFilter=Yes RoutingDomain="(<GUID1>,<GUID2>)" OY netsh trace start provider=Microsoft-Windows-Ras-NdisWanPacketCapture providerFilter=Yes RoutingDomain=!"(<GUID1>,<GUID2>)" VPN.UserName=<UserName/InterfaceName> :Nc[v(u7bbcS Ty/T(upencSUc0 la: dkcO z^[{ hV N/ecV0R>NbBlS OY netsh trace start provider=Microsoft-Windows-Ras-NdisWanPacketCapture providerFilter=Yes VPN.UserName="UserXXX" cO z^: Microsoft-Windows-TCPIP TCP.AnyPort=<zS> TCP.SourcePort=<zS> TCP.DestinationPort=<zS> AQ(WĉRc[vzS N6eƖߍ*0 SN^(uN N[{ hVvNa~T0Yg nbvhzS9SM TCP.AnyPort \AQ 6eƖߍ*0 la: ُNcO z^[{ hV/ecR>N0VTBlS0 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes TCP.SourcePort=80 TCP.DestinationPort=1234 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes TCP.AnyPort=(80,443) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes TCP.SourcePort=!(900-1000) ProcessId=<ۏ z ID> :Ncvۏ z ID /T(u ETW ߍ*0 la: dkcO z^[{ hV/ecV0R>NTBlS0 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes ProcessId=987 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes ProcessId=(1,5,8,9) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes ProcessId=!(100-200) IPv4.Address=<IPv4 0W@W> IPv4.SourceAddress=<IPv4 0W@W> IPv4.DestinationAddress=<IPv4 0W@W> :Ncv IPv4 0W@Wb0W@W/T(u ETW ߍ*0 Ygnbvh0W@WN[{ hV9SM IPv4.Address \AQߍ*0SN TeO(unbvh [{ hV0 la: ُNcO z^[{ hV/ecR>N0VTBlS0 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv4.Address=(2.0.0.0-3.0.0.0) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv4.SourceAddress=(2.0.0.0,3.0.0.0) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv4.DestinationAddress=!(2.0.0.0) IPv6.Address=<IPv6 0W@W> IPv6.SourceAddress=<IPv6 0W@W> IPv6.DestinationAddress=<IPv6 0W@W> :Ncv IPv6 0W@W/T(u ETW ߍ*0 Ygnbvh0W@WN[{ hV9SM IPv6.Address \AQߍ*0SN TeO(unTvh [{ hV0 la: ُNcO z^[{ hV/ecR>N0VTBlS0 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv6.Address=(2001::1-2001::ffff) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv6.SourceAddress=(2001::1-2001::ffff) OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes IPv6.DestinationAddress=!(2001::ffff) RoutingDomain=<GUID> :Nc[v1uW/T(upencSUc0 O(u "Get-NetCompartment" RQS(u1uW0 l: dkcO z^[{ hV/ecR>NTBlS0 OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes RoutingDomain="{B1062982-2B18-4B4F-B3D5-A78DDB9CDD49}" OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes RoutingDomain="(<GUID1>,<GUID2>)" OY netsh trace start provider=Microsoft-Windows-TCPIP providerFilter=Yes RoutingDomain=!"(<GUID1>,<GUID2>)" \ la: d^S gf &TRcO z^[{ hVv(ulNUc[{ hV {|f:yUc[{ hVv(ul  N NcO z^/eccO z^[{ 0SNO(uN N }TNg wcO z^yr[v.^R: Microsoft-Windows-TCPIP 'netsh trace show providerFilterHelp Microsoft-Windows-TCPIP' Microsoft-Windows-Ras-NdisWanPacketCapture 'netsh trace show providerFilterHelp Microsoft-Windows-Ras-NdisWanPacketCapture' PA vQNMhV %1: N*YQMhV %1: NLrsMhV %1: FDDI MhV %1: sVMhV %1: PPP MhV %1: SLIP MhV %1: SMhV %1: e~@\WQMhV %1: *gwMhV %1:PA}TN y %1!s! v sQT1Y%(=0x%1!x!)0  ~b N0R;mR %1!s! 0 #}TN y %1!s! vNvZbNN ,ncO z^: %1 N Ne: %2 ,ncO z^: %1 N Ne: %2 ,ncO z^: %1 N Ne: %2 4VS_VERSION_INFO@%@%?StringFileInfo080404B0LCompanyNameMicrosoft Corporation: FileDescriptionQ~ߍ*.^R z^r)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623): InternalNamenettrace.dll.LegalCopyright Microsoft Corporation. All rights reserved.JOriginalFilenamenettrace.dll.muij%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation Ϣ
OS Information
Credential Providers
 
Environment Information
Adapter Information
DNS Information
Neighbor Information
 
WLAN Auto-Config Eventlog
 
Windows
WCN Information
 
Windows ǽ
Windows Firewall Configuration
Windows Firewall Effective Rules
Connection Security Eventlog
Connection Security Eventlog (Verbose)
Firewall Eventlog
Firewall Eventlog (Verbose)
 
Winsock
Winsock LSP Catalog
 
ļ
File Sharing Configuration
 
עת
Credential Providers
Credential Provider Filters
API Permissions
WlanSvc HKLM Dump
WinLogon Notification Subscribers
Network Profiles
 
ļ
Primary Event Trace Log (ETL)
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD