Doing a packet capture without installing anything on a windows server
Hey guys !! I hope you are doing great. Down here, things are going well. It's been warm and beautiful and everyone seems to be happy. Today we are going to talk about how to do a packet capture on a windows server without installing anything. Have you ever wanted to do a capture to see what's going on into the wire ? This has helped me countless times. I can't tell how important these captures are to help us solving issues. Not all times, you can install wireshark or any other tool that can do this on the server you want to collect the data from but, did you know windows (2008 R2 and newer) has a builtin command that can do this for us ? Yeah ! This command is "netsh". So, let's get started and I will show you how to do this. Tooling Although you can capture without installing anything, in order to actually see the data, a tool is required. You can either use Wireshark or Microsoft Message Analyzer. Those are free and you can just google and down