Releases: microsoft/etl2pcapng
Releases · microsoft/etl2pcapng
v1.11.0
v1.10.0
The tool is now 10x faster.
v1.9.0
-Support for VPN (Microsoft-Windows-Ras-NdisWanPacketCapture) events.
-Includes thread ID in packet comments.
-Includes RSS hash in packet comments for VMSwitch packets.
v1.7.0
- Signed binaries.
- Enable ControlFlowGuard.
- Include VMSwitch packet info in packet comments.
v1.5.0
v1.4.1
-Fixes a bug in the packet comment feature that caused corrupt pcapng files to be generated.
-Adds a helpful message when the tool is run on files that don't contain a packet capture.
v1.4.0
v1.3.0
Adds packet comments with PID information.
Release v1.2.0
Adds packet direction info
Release v1.1.0
Adds support for multi-event packets (as found in some captures on Win8 and older systems).