Skip to content

Releases: microsoft/etl2pcapng

v1.11.0

25 Oct 22:49
65e2a98
Compare
Choose a tag to compare

-Allow only the input file to be specified (output file will have the same name with a pcapng extension)
-Handle pktmon captures more gracefully (warn the user that this tool isn't made for them)

v1.10.0

21 Nov 23:43
40ec44b
Compare
Choose a tag to compare

The tool is now 10x faster.

v1.9.0

15 Nov 23:36
e9fd1e3
Compare
Choose a tag to compare

-Support for VPN (Microsoft-Windows-Ras-NdisWanPacketCapture) events.
-Includes thread ID in packet comments.
-Includes RSS hash in packet comments for VMSwitch packets.

v1.7.0

24 Nov 21:30
833ae2b
Compare
Choose a tag to compare
  • Signed binaries.
  • Enable ControlFlowGuard.
  • Include VMSwitch packet info in packet comments.

v1.5.0

23 Feb 20:00
a5e1575
Compare
Choose a tag to compare
  1. Write iftype and ifindex into interface description blocks.
  2. Statically link C runtime so vcredist doesn't need to be installed.

v1.4.1

10 Feb 23:24
fd059e4
Compare
Choose a tag to compare

-Fixes a bug in the packet comment feature that caused corrupt pcapng files to be generated.
-Adds a helpful message when the tool is run on files that don't contain a packet capture.

v1.4.0

04 Sep 20:29
5580702
Compare
Choose a tag to compare

Automatically infer original fragment length for truncated fragments (Raw/Ethernet)

v1.3.0

05 Jan 19:35
9361329
Compare
Choose a tag to compare

Adds packet comments with PID information.

Release v1.2.0

27 Nov 23:50
3f02f2e
Compare
Choose a tag to compare

Adds packet direction info

Release v1.1.0

25 Nov 22:29
595a30d
Compare
Choose a tag to compare

Adds support for multi-event packets (as found in some captures on Win8 and older systems).