Runtime packet filtering with encapsulation support Packet drop detection, including drop reason reporting Packet capture at multiple locations of the networking stack Below are some of the main capabilities and limitations of PacketMon in Windows 10 and Windows Server 2019 version 2004 (May 2020 Update). Since then, its functionality has been evolving through Windows releases. Packetmon was first released in Windows 10 and Windows Server 2019 version 1809 (October 2018 update). It is available in-box via pktmon.exe command, and via Windows Admin Center extensions. The tool is especially helpful in virtualization scenarios like container networking, SDN, etc. It can be used for packet capture, packet drop detection, packet filtering and counting.

Ipv4.address='client ip' and ipv4.Packet Monitor (PacketMon) is an in-box cross-component network diagnostics tool for Windows.

So you'll need to filter the network capture to see only the related traffic. However, your interest is only to look into the traffic/packets that are related to the specific connectivity problem you're facing.

The saved file has captured all the traffic that is flowing to and from the selected network adapters on the local computer. By default, the file will be saved as a '.cap' file. Select Stop, and go to File > Save as to save the results. Reproduce the issue, and you'll see that Network Monitor grabs the packets on the wire. Select the network adapters where you want to capture traffic, click New Capture, and then select Start. Network Monitor opens with all network adapters displayed. Run netmon in an elevated status by choosing Run as Administrator. When the driver gets hooked to the network interface card (NIC) during installation, the NIC is reinitialized, which might cause a brief network glitch.

You can see the same on the adapter properties, as shown in the following image: When you install Network Monitor, it installs its driver and hooks it to all the network adapters installed on the device. To get started, download Network Monitor tool. For more information, see Microsoft Message Analyzer Operating Guide. For similar functionality, consider using another, non-Microsoft network protocol analyzer tool. There is currently no Microsoft replacement for Microsoft Message Analyzer in development at this time. Also, Microsoft Message Analyzer (MMA) was retired and its download packages were removed from sites on November 25, 2019. Network Monitor is the archived protocol analyzer and is no longer under development.

Microsoft packet capture tool