Network monitor 3.4 issue

Solution 1:

You can't just throw pipe characters (|) onto the command line without escaping them or surrounding them with quotes ("). Pipe characters have special meaning to the command interpreter. Furthermore, make sure that Nmcap.exe is either in your current working directory (e.g. C:\) or in your path environment variable. The binary is most likely in C:\Program Files\Microsoft Network Monitor 3\ on your computer.

Something like this:

C:\>Nmcap.exe /network * /capture "KerberosV5 || TCP.port==389 || UDP.port==389" /file c:\temp\capture.chn

Read the help for Nmcap.exe: Nmcap.exe /?