Ask Your Question

Huang's profile - activity

2023-02-23 22:24:29 +0000 received badge  Popular Question (source)
2023-01-22 06:29:13 +0000 commented answer How to capture etw.* data by Wireshark?

Thank you.

2023-01-22 06:29:03 +0000 marked best answer How to capture etw.* data by Wireshark?

I found that there are 3 etw filter at filter reference page: https://www.wireshark.org/docs/dfref/.... But how to capture etw data/events by Wireshark? If I can't, what does these filters do?

etw: Event Tracing for Windows (3.6.0 to 4.0.3, 25 fields)

etw.ndis: ETW Ndis (2.6.0 to 4.0.3, 95 fields)

etw.wfp_capture: ETW WFP Capture (2.6.0 to 4.0.3, 10 fields)

2023-01-22 06:29:02 +0000 received badge  Scholar (source)
2023-01-22 04:55:31 +0000 asked a question How to capture etw.* data by Wireshark?

How to capture etw.* data by Wireshark? I found that there are 3 etw filter at filter reference page: https://www.wiresh