Packet capture via cmd

Solution 1:

Windows 7 and above have this feature built in. http://blogs.msdn.com/b/canberrapfe/archive/2012/03/31/capture-a-network-trace-without-installing-anything-works-for-shutdown-and-restart-too.aspx

The short version:

1. Open an elevated command prompt and run: netsh trace start persistent=yes capture=yes tracefile=c:\temp\nettrace-boot.etl (make sure you have a \temp directory or choose another location).

2. Reproduce the issue or do a reboot if you are tracing a slow boot scenario.

3. Open an elevated command prompt and run: netsh trace stop

Your trace will be stored in c:\temp\nettrace-boot.etl** or where ever you saved it. You can view the trace on another machine using netmon.