File: C:/Windows/System32/zh-TW/nettrace.dll.mui
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode.
$ 5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R� PE L � ! �
� "� @ � 8 .rdata � @ @.rsrc � � @ @ ��
�
T 8 8 ��
� $ � � 8 .rdata 8 x .rdata$zzzdbg @ .rsrc$01 @$ �� .rsrc$02 �-�+�?�6�.6���< ^� ґ~A���
� 0 �0 � H � � � � � � x ( �~ @ � X �� p �� � �� � �� � �� � �� � �� �� �� 0 �� H �� ` �� x �� � �� � � � � � � � 0 @ P ` p � � � � � � � � 8$ � � �$ > � 0% , � \D � � F T � lH Z � �M x � @O , � lV � � �s T" � D� � X� � � � 2 � @� � @� � � � n � `� � `� 4 � �� � � h� � � M U I ��� ��ד�.�O���\ ~k��J6l�Z@��� � � � M U I z h - T W R�Q�Nb�0�c�O����d��rKa0
PA ���Y��d�0
% 1 ! s !
���Y��d�0
O(u�e_: t r a c e s t a r t [ s e s s i o n n a m e = < �]\O���k
T1z> ]
[ [ s c e n a r i o = ] < Hh�O 1 , Hh�O 2 > ]
[ [ g l o b a l K e y w o r d s = ] k e y w o r d s ] [ [ g l o b a l L e v e l = ] l e v e l ]
[ [ c a p t u r e = ] y e s | n o ] [ [ c a p t u r e t y p e = ] p h y s i c a l | v m s w i t c h | b o t h ]
[ [ r e p o r t = ] y e s | n o | d i s a b l e d ] [ [ p e r s i s t e n t = ] y e s | n o ]
[ [ t r a c e F i l e = ] p a t h \ f i l e n a m e ] [ [ m a x S i z e = ] f i l e m a x s i z e ]
[ [ f i l e M o d e = ] s i n g l e | c i r c u l a r | a p p e n d ] [ [ o v e r w r i t e = ] y e s | n o ]
[ [ c o r r e l a t i o n = ] y e s | n o | d i s a b l e d ] [ c a p t u r e f i l t e r s ]
[ [ p r o v i d e r = ] p r o v i d e r I d O r N a m e ] [ [ k e y w o r d s = ] k e y w o r d M a s k O r S e t ]
[ [ l e v e l = ] l e v e l ] [ b u f f e r S i z e = < �}]�@S'Y\> ]
[ [ [ p r o v i d e r = ] p r o v i d e r 2 I d O r N a m e ] [ [ p r o v i d e r F i l t e r = ] y e s | n o ] ]
[ [ k e y w o r d s = ] k e y w o r d 2 M a s k O r S e t ] [ [ p e r f M e r g e = ] y e s | n o ]
[ [ l e v e l = ] l e v e l 2 ] . . .
�-�<P:
c a p t u r e = n o ( c�[d��N��d��N�N �/f&T_U(u
\S�d�S)
c a p t u r e t y p e = p h y s i c a l ( c�[/f&T ���
�Pݑ
\�[Ԛ�}��Nb�aS0�Pݑ
\[��d�N�chV �
b TBfݑ
\�[Ԛ�}��Nb�aS�T[��d�N�chV �_U(u\S�d�S)
r e p o r t = n o ( c�[܈EQ1XJT/f&T#� T
��d��j Nw�"u u)
p e r s i s t e n t = n o ( c�[��d��]\O���k/f&T(W
͑�e��_j�_|~�~ �&NN(W|v�Q n e t s h t r a c e s t o p MRc�~��_U)
m a x S i z e = 2 5 0 M B ( c�[ g'Y�v��d��j'Y\ �0 = �l g g'Y<P)
b u f f e r S i z e = 5 1 2 ( c�[�N K B �p�UMO�v��d��}]�@S'Y\ � g\ 4 � g'Y 1 6 3 8 4 )
f i l e M o d e = c i r c u l a r
o v e r w r i t e = y e s ( c�[/f&T�����[�s g�v��d�
8��Q�j)
c o r r e l a t i o n = d i s a b l e d ( c�[�vܕ�v�N�N/f&Tg�v�Nܕo�
&N�D}(W Nw�)
p e r f M e r g e = y e s ( c�[/f&T��\He��-N|~nj�eTuO0R
��d�KN-N)
t r a c e F i l e = % % L O C A L A P P D A T A % % \ T e m p \ N e t T r a c e s \ [ s e s s i o n n a m e ] N e t T r a c e . e t l
( c�[8��Q�jHh�vMOn)
p r o v i d e r F i l t e r = n o ( c�[/f&T_U(u�c�O��{x�hV)
s e s s i o n n a m e = ' ' ( c�[��d��]\O���k�v
T1z ��N�O
�� Y6eƖ Tek��d�0
d�^��SYc�[ �&TGR p r o v i d e r ܕu�W[�-�<P�p a l l �N l e v e l �p 2 5 5 0
�O�Y:
n e t s h t r a c e s t a r t s c e n a r i o = I n t e r n e t C l i e n t c a p t u r e = y e s
���Y��d� I n t e r n e t C l i e n t �r�l�S�OX[�v�c�O� �
&N�Pݑ
\�[Ԛ�}��Nb�aS_U(u\S�d�S0
vu|v�Q " n e t s h t r a c e s t o p " }T�Nb/f�|q}͑�e��_jBf �
��d�\g\Pbk0
\8��Q�jHhO(u�-�MOn�
T1z0�Y�g
�
�jHhX[(W �\g���[
��jHh0
n e t s h t r a c e s t a r t p r o v i d e r = m i c r o s o f t - w i n d o w s - w l a n - a u t o c o n f i g
k e y w o r d s = s t a t e , u t : a u t h e n t i c a t i o n
���Y��d� m i c r o s o f t - w i n d o w s - w l a n - a u t o c o n f i g �c�O�
vu|v�Q " n e t s h t r a c e s t o p " }T�Nb/f�|q}͑�e��_jBf �
��d�\g\Pbk0
\8��Q�jHhO(u�-�MOn�
T1z0�Y�g
�
�jHhX[(W �\g���[
��jHh0
�Sg��wQ gܕu�W[ ' s t a t e ' b ' u t : a u t h e n t i c a t i o n ' �v�N�N0
n e t s h t r a c e s h o w p r o v i d e r }T�N�S(u�No�:y
/e�c�vܕu�W[�d\}0
�d�S�{x�hV:
�S g(WO(u c a p t u r e = y e s f�x0W_U(u�d�SBf �
Mb/e�c�d�S�{x�hV0O(u ' n e t s h t r a c e s h o w C a p t u r e F i l t e r H e l p '
�So�:y/e�c�v�d�S�{x�hV�vQO(u�e_�vn�U0
�c�O��{x�hV:
gY P�c�O�/e�c�c�O��{x�hV �&N�S(W�k P�c�O��_O(u
p r o v i d e r F i l t e r = Y e s �R�N_U(u0
O(u ' n e t s h t r a c e s h o w P r o v i d e r F i l t e r H e l p ' �So�:y
�k P�c�O��v/e�c�c�O��{x�hV�vQO(u�e_�vn�U0 \Pbk��d�0
w
% 1 ! s !
\Pbk��d�0
O(u�e_: [ s e s s i o n n a m e = < s e s s i o n n a m e > ]
�-�<P:
s e s s i o n n a m e = ' ' ( c�[��\Pbk�v��d��]\O���k)
�P;�: \Pbk�vMR2�L�-N�v�}��d�
�]\O���k
\��d��jHhI��c�p H T M L 1XJT0
�
% 1 ! s !
\��d��jHhI��c�p H T M L 1XJT0
O(u�e_: c o n v e r t [ i n p u t = ] t r a c e f i l e n a m e . e t l [ [ o u t p u t = ] f i l e n a m e ]
[ [ d u m p = ] C S V | X M L | E V T X | T X T | N o ] [ [ r e p o r t = ] y e s | n o ]
[ [ o v e r w r i t e = ] y e s | n o ] [ [ t m f p a t h = ] p a t h n a m e ]
�Sxe:
j� <P
i n p u t - 8�eQ E T L ��d��jHh
o u t p u t - 8��Q�jHh
T1z ( �-�<P�p8�eQ
T1z)
d u m p - 8��Q<h_ ( �-�<P = T X T )
r e p o r t - "u u H T M L 1XJT ( �-�<P = n o )
o v e r w r i t e - ���[�s g�v�jHh ( �-�<P = n o )
t m f p a t h - ㉼x W P P ��d��v t m f �jHh_
�P;�: \8�eQ E T L �jHhI��c�pc�[�v<h_0
���Y:��e�]\O���k0
'
% 1 ! s !
���Y:��e�]\O���k0
O(u�e_: d i a g n o s e [ s c e n a r i o = ] < s c e n a r i o n a m e > [ [ n a m e d A t t r i b u t e = ] < a t t r i b u t e V a l u e > ]
[ [ s a v e S e s s i o n T r a c e = ] < y e s | n o > ] [ [ r e p o r t = ] < y e s | n o > ] [ [ c a p t u r e = ] < y e s | n o > ]
�-�<P:
s a v e S e s s i o n T r a c e = n o ( �Y�g gc�[ r e p o r t = y e s ��-�<P/f ' y e s ' )
c a p t u r e = n o
r e p o r t = n o
�P;�: ���Y:��e�]\O���k
\��d��jHhck8^Sb�{x��p�e�v8��Q�jHh0
�
% 1 ! s !
\��d��jHhck8^Sb�{x��p�e�v8��Q�jHh0
O(u�e_: t r a c e c o r r e l a t e [ i n p u t = ] t r a c e f i l e n a m e . e t l
[ o u t p u t = ] n e w t r a c e f i l e n a m e . e t l
[ [ f i l t e r = ] A c t i v i t y _ I D ] [ [ o v e r w r i t e = ] y e s | n o ]
[ [ r e t a i n c o r r e l a t i o n e v e n t s = ] y e s | n o ] [ [ r e t a i n p i i = ] y e s | n o ] [ [ r e t a i n g l o b a l e v e n t s = ] y e s | n o ]
�Sxe:
j� <P
i n p u t - 8�eQ E T L ��d��jHh
o u t p u t - 8��Q�jHh
T1z
f i l t e r - �P8��Q�dk;m�R G U I D �vܕ�v�N�N
o v e r w r i t e - ���[�s g�v�jHh
r e t a i n c o r r e l a t i o n e v e n t s - �OYu�v�Nܕo��N�N
r e t a i n p i i - �OYuS+T P�NX�%Rnj
��v�N�N
r e t a i n g l o b a l e v e n t s - �OYuhQ�W�N�N
�-�<P:
f i l t e r = n o n e
o v e r w r i t e = n o
r e t a i n c o r r e v e n t s = n o
e t a i n p i i = y e s
r e t a i n g l o b a l e v e n t s = y e s
�P;�:
�{x�;m�RX�%R�x/f�N { x x x x x x x x - x x x x - x x x x - x x x x - x x x x x x x x x x x x }
<h_h�:y�v
G U I D P�NX�%Rnj
�S�b\S�d�S�N�N
TuO��d��jHh&N�e�X&{_�-N|~nj�e0
�
% 1 ! s !
TuO��d��jHh&N�e�X&{_�-N|~nj�e0
O(u�e_: m e r g e i n p u t 1 . e t l i n p u t 2 . e t l . . . o u t p u t . e t l
�Sxe:
��TuOKN E T L �jHh�vn�U
n�U-N�v g�_ N P�jHh/f8��Q
�P;�: TuO�jHh&N�ceQ&{_�� P e r f T r a c k -N|~nj�e0
\Hh�O/S�Q� W P R -��[�j0
�
% 1 ! s !
\Hh�O/S�Q� W P R -��[�j0
O(u�e_: t r a c e e x p o r t [ s c e n a r i o = ] < Hh�O
T1z> [ [ f i l e = ] < �jHh
T1z> ]
�P;�: �g\ W P P ��d�Hh�O@bS+T�v@b g�c�O�/S�Q�
W i n d o w s P e r f o r m a n c e R e c o r d e r ��d�-��[�j ��e_/fO(u�-�
ܕu�W[�Td\}0
PA o�:y��d�-��[0
% 1 ! s !
o�:y��d�-��[0
o�:y�S(u�vHh�O0
&
% 1 ! s !
o�:y�S� s t a r t }T�N-dM�O(u�vHh�O�S(uHh�On�U0
o�:yHh�Onj
�0
�
% 1 ! s !
o�:yHh�Onj
�0
O(u�e_: t r a c e s h o w s c e n a r i o [ n a m e = ] < Hh�O
T1z>
�P;�: �go�:y gܕHh�O�vvQ�Nnj
� �S�b
' d i a g n o s e ' }T�N�S����Bl�v@b gl\'`0
Nn�U�S��g�pc�[Hh�O_U(u�v�c�O� �
�N�S�S��gWY(u�v�-�ܕu�W[�T
d\}0
o�:y�S(u�v�c�O�0
%
% 1 ! s !
o�:y�S� s t a r t }T�N-dM�O(u�v�S(u�c�O�n�U0
o�:y�c�O�nj
�0
�
% 1 ! s !
o�:y�S-dM� s t a r t }T�NO(u�v�c�O�nj
�0
O(u�e_: t r a c e s h o w p r o v i d e r [ n a m e = ] < �c�O�X�%R�xb
T1z>
�P;�: �go�:yc�[�c�O�@b/e�c�v
ܕu�W[�Td\}0���Y��d��]\O���kBf�SO(u
��Nܕu�W[�Td\}0
R�QhQ�Wܕu�W[�I{}0
T
% 1 ! s !
o�:y�S� s t a r t }T�N-dM�O(u�vhQ�Wܕu�W[�I{}n�U0
O(u�e_: t r a c e s h o w g l o b a l K e y w o r d s A n d L e v e l s
R�Q�S(u�v�Nb�0
4
% 1 ! s !
o�:y�}��Nb��vn�U0
O(u�e_: t r a c e s h o w i n t e r f a c e s
R�Q/e�c�v�d�S�{x�hV�O(u�e_0
B
% 1 ! s !
R�Q/e�c�v�d�S�{x�hV�O(u�e_0
O(u�e_: t r a c e s h o w C a p t u r e F i l t e r H e l p
o�:yTS�R z_^�%Rnj
�0
�
% 1 ! s !
o�:yTS�R z_^�%R
T1z0�c��N�S�v�OTS�R z_
^�%R�vn�U0
�_N�SR�QTS�R z_^�%R�S���P�V�v9h,g�S�V��O�_n�U0
O(u�e_: t r a c e s h o w h e l p e r c l a s s [ n a m e = ] < h e l p e r c l a s s n a m e >
R�Q/e�c�v�c�O��{x�hV�TO(u�e_0
D
% 1 ! s !
R�Q/e�c�v�c�O��v�{x�hV�TO(u�e_0
O(u�e�l: t r a c e s h o w P r o v i d e r F i l t e r H e l p
PA K
��d�-��[:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
�jHhMOn = % 1 ! s !
T
�S(u�vHh�O ( % 1 ! d ! ) :
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2�eQޞ: % 1 ! w s !
�c�O�
- - - - - - - - -
T
�S(u�v�c�O� ( % 1 ! d ! )
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
$
T1z: % 1 ! s !
�c�O� G u i d : % 2 ! s !
W
I{} ( <P) - % 1 ! d ! CQ }
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Y
ܕu�W[ ( n�i) - % 1 ! d ! CQ }
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
�]b�R\Pbk��d��]\O���k0
�rKa: ck(W�WL�
��d��jHh: % 1 ! s !
D��R: % 2 ! s !
�_�t: % 3 ! s !
'Y\
NP�: % 4 ! s !
1XJT: % 5 ! s !
_
�c�O�:
T1z: % 1 ! s !
�c�O� G u i d : % 2 ! s !
I{}: % 3 ! s !
ܕu�W[: % 4 ! s !
S
�c�O�:
T1z: % 1 ! s !
�c�O� G u i d : % 2 ! s !
�-�I{}: % 3 ! s !
�-�ܕu�W[: % 4 ! s !
1XJTMOn = % 1 ! s !
8
8�eQ�jHh: % 1 ! s !
�PpS�jHh: % 2 ! s !
�PpS<h_: % 3 ! s !
1XJT�jHh: % 4 ! s !
V
�c�: % 1 ! w s !
�Nb� G U I D : % 2 ! S !
�Nb�"}_: % 3 ! d !
�Nb� L u i d : 0 x % 4 ! I 6 4 X !
i
l\'`
T1z ^��W �_���v �c�
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
~b0R9h,g�S�V: % 1 ! d !
'
9h,g�S�V # % 1 ! d !
- - - - - - - - - - - - - -
% 2 ! w s !
�S(u�v�O�_: % 1 ! d !
-
�O�_ # % 1 ! d !
- - - - - - - - - -
% 2 ! w s !
ck(W:��e ' % 1 ! w s ! ' . . . �[b
�c�: % 1 ! w s !
N D F ��d��jHh: ' % 1 ! w s ! '
N D F 1XJT�jHh: ' % 1 ! w s ! '
ck(W"u unj�e6eƖ�1XJT. . . ck(W"u u�PpS . . . �[b
1YWe ( /���= 0 x % 1 ! X ! )
X
�d�S�{x�hV:
�S g(W�N c a p t u r e = y e s f�x_U(u�d�SBf �Mb/e�c�d�S�{x�hV0/e�c�v�d�S
�{x�hV�p:
C a p t u r e I n t e r f a c e = < i n t e r f a c e n a m e o r G U I D >
�pc�[�v�Nb�
T1zb G U I D _U(u\S�d�S0O(u
' n e t s h t r a c e s h o w i n t e r f a c e s ' �OR�Q�S(u�v�Nb�0
�{�O C a p t u r e I n t e r f a c e = { 7 1 6 A 7 8 1 2 - 4 A E E - 4 5 4 5 - 9 D 0 0 - C 1 0 E F D 2 2 3 5 5 1 }
�{�O C a p t u r e I n t e r f a c e = ! { 7 1 6 A 7 8 1 2 - 4 A E E - 4 5 4 5 - 9 D 0 0 - C 1 0 E F D 2 2 3 5 5 1 }
�{�O C a p t u r e I n t e r f a c e = " L o c a l A r e a C o n n e c t i o n "
E t h e r n e t . A d d r e s s = < M A C a d d r e s s >
ݑ
\�O�n�T�v�v0W M A C MO@W&{Tc�[�v�{x�hV0
�{�O E t h e r n e t . A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4
E t h e r n e t . S o u r c e A d d r e s s = < M A C a d d r e s s >
ݑ
\�O�n M A C MO@W&{Tc�[�v�{x�hV0
�{�O E t h e r n e t . S o u r c e A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4
E t h e r n e t . D e s t i n a t i o n A d d r e s s = < M A C a d d r e s s >
ݑ
\�v�v0W M A C MO@W&{Tc�[�v�{x�hV0
�{�O E t h e r n e t . D e s t i n a t i o n A d d r e s s = 0 0 - 0 D - 5 6 - 1 F - 7 3 - 6 4
E t h e r n e t . T y p e = < e t h e r t y p e >
ݑ
\ M A C e t h e r t y p e &{Tc�[�v�{x�0
�{�O E t h e r n e t . T y p e = I P v 4
�{�O E t h e r n e t . T y p e = N O T ( 0 x 8 6 D D )
�{�O E t h e r n e t . T y p e = ( I P v 4 , I P v 6 )
W i f i . T y p e = < M a n a g e m e n t | D a t a >
ݑ
\ W i f i ^��W&{Tc�[�v�{x�hV0AQ1��v<P/f ' M a n a g e m e n t ' � ' D a t a ' 0
�Y�g*gc�[ �
NgWY(u W i f i . T y p e �{x�hV0
�la: � P�d�S�{x�hV
N/e�c�{
W0n�Ub/f&T�[0
�{�O W i f i . T y p e = M a n a g e m e n t
P r o t o c o l = < p r o t o c o l >
ݑ
\ I P �
�TS�[&{Tc�[�v�{x�hV0
�{�O P r o t o c o l = 6
�{�O P r o t o c o l = ! ( T C P , U D P )
�{�O P r o t o c o l = ( 4 - 1 0 )
I P v 4 . A d d r e s s = < I P v 4 a d d r e s s >
ݑ
\�O�n�T�v�v0W I P v 4 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 4 . A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1
�{�O I P v 4 . A d d r e s s = ! ( 1 5 7 . 5 9 . 1 3 6 . 1 )
�{�O I P v 4 . A d d r e s s = ( 1 5 7 . 5 9 . 1 3 6 . 1 , 1 5 7 . 5 9 . 1 3 6 . 1 1 )
I P v 4 . S o u r c e A d d r e s s = < I P v 4 a d d r e s s >
ݑ
\�O�n I P v 4 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1
I P v 4 . D e s t i n a t i o n A d d r e s s = < I P v 4 a d d r e s s >
ݑ
\�v�v0W I P v 4 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 4 . D e s t i n a t i o n A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1
I P v 6 . A d d r e s s = < I P v 6 a d d r e s s >
ݑ
\�O�n�T�v�v0W I P v 6 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 6 . A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8
�{�O I P v 6 . A d d r e s s = ! ( f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8 )
I P v 6 . S o u r c e A d d r e s s = < I P v 6 a d d r e s s >
ݑ
\�O�n I P v 6 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 6 . S o u r c e A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8
I P v 6 . D e s t i n a t i o n A d d r e s s = < I P v 6 a d d r e s s >
ݑ
\�v�v0W I P v 6 MO@W&{Tc�[�v�{x�hV0
�{�O I P v 6 . D e s t i n a t i o n A d d r e s s = f e 8 0 : : 5 0 3 8 : 3 c 4 : 3 5 d e : f 4 c 3 \ % % 8
C u s t o m M a c = < t y p e ( o f f s e t , v a l u e ) >
ݑ
\�N M A C j-���-��vc�[MO�yKN<P �&{Tc�[�v�{x�hV0
�la: � P�d�S�{x�hV
N/e�c�{
W0n�Ub/f&T�[0
�{�O C u s t o m M a c = U I N T 8 ( 0 x 1 , 0 x 2 3 )
�{�O C u s t o m M a c = A S C I I S T R I N G ( 3 , t e s t )
�{�O C u s t o m M a c = U N I C O D E S T R I N G ( 2 , t e s t )
C u s t o m I p = < t y p e ( o f f s e t , v a l u e ) >
ݑ
\�N I P j-���-��vc�[MO�yKN<P �&{Tc�[�v�{x�hV0
�la: � P�d�S�{x�hV
N/e�c�{
W0n�Ub/f&T�[0
�{�O C u s t o m I p = U I N T 1 6 ( 4 , 0 x 3 2 0 1 )
�{�O C u s t o m I p = U I N T 3 2 ( 0 x 2 , 1 8 9 3 2 )
C a p t u r e M u l t i L a y e r = < y e s | n o >
_U(uYd\\S�d�S0
�la: � P�d�S�{x�hV
N/e�c�{
W0n�Ub/f&T�[0
P a c k e t T r u n c a t e B y t e s = < v a l u e >
�S�d�S�k P\S�vc�[MOCQD}xe0
�la: � P�d�S�{x�hV
N/e�c�{
W0n�Ub/f&T�[0
�{�O P a c k e t T r u n c a t e B y t e s = 4 0
Q
�la:
�S�N TBfO(uY P�{x�hV0
NN� �
N��͑�O(u�v T�v�{x�hV0
�O�Y ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = I P v 4
I P v 4 . A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 '
�_��Bf�f�xs���{x�hV0�Y�g*gc�[�{x�hV �g\�[���p 0
N͑��
00
�O�Y ' n e t s h t r a c e s t a r t c a p t u r e = y e s I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1 '
�\�Sg�_ 1 5 7 . 5 9 . 1 3 6 . 1 �d�S I P v 4 \S � �N�[_NgO(u
^� I P v 4 YN*Y�}�^��W�O�d�S\S ��V�p*gf�xc�[ E t h e r n e t . T y p e
�{x�hV0
�O�Y ' n e t s h t r a c e s t a r t c a p t u r e = y e s I P v 4 . S o u r c e A d d r e s s = 1 5 7 . 5 9 . 1 3 6 . 1
E t h e r n e t . T y p e = I P v 4 '
�\�Sg�_ 1 5 7 . 5 9 . 1 3 6 . 1 �d�S I P v 4 \S0\ghc�hwQ gvQ
�NYN*Y�}�^��W�v\S ��V�p�]c�[f�x�v�{x�hV0
�d�S�{x�hV/e�c�{
W0n�U�T&T�[ ( d�^��S g��f) 0
�O�Y �{
W: ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = I P v 4
P r o t o c o l = ( 4 - 1 0 ) '
�\(W�N�e 4 � 1 0 ( +T) KN���v�
�TS�[�d�S I P v 4 \S0
�O�Y n�U: ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ( I P v 4 , I P v 6 ) '
�\�Sg�d�S I P v 4 � I P v 6 \S0
�O�Y &T�[: ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ! I P v 4 '
�\g�d�S@b g^� I P v 4 \S0
(W�g�N�`�l N �&T�[�S��g�n�UP}T0
�O�Y ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = ! ( I P v 4 , I P v 6 ) '
�\g�d�S@b g�v^� I P v 4 �^� I P v 6 \S0
�S�NO(u ' N O T ' �N�S�N ' ! ' �Oh�:y&T�[0(W��&T�[�v<PhT
W�_��c�O�b_�0
�O�Y ' n e t s h t r a c e s t a r t c a p t u r e = y e s E t h e r n e t . T y p e = N O T ( I P v 4 ) '
T1z: % 1 ! w s !
�c�: % 2 ! w s !
PAI
�OX[�vTS�R z_^�%R:
TS�R z_^�%R
T1z �c�
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
F
9h,g�S�V % 1 ! d ! / % 2 ! d !
- - - - - - - - - - - - - - - -
�c�: % 3 ! w s !
I D : % 4 ! w s !
Q
�O�_ % 1 ! d ! / % 2 ! d !
- - - - - - - - - - - -
�c�: % 3 ! w s !
X�%R�x: % 4 ! w s !
�
8�eQ�jHh: % 1 ! s !
8��Q�jHh: % 2 ! s !
�{x�hV: % 3 ! s !
���[: % 4 ! s !
R e t a i n C o r r e l a t i o n E v e n t s : % 5 ! s !
R e t a i n P I I : % 6 ! s !
R e t a i n G l o b a l E v e n t s : % 7 ! s !
ck(W�^�z��d�KN���vܕo�. . . ��d��jHh�TvQ�N�u㖒c�nj
��]�}o�b " % 1 ! s ! " 0
ck(W"u unj�e6eƖ. . . ck(WTuO��d��jHh. . . {
�c�O��{x�hV:
Y P�c�O�/e�c�c�O��{x�hV �&N�S(W�k P�c�O��_O(u
p r o v i d e r F i l t e r = Y e s �R�N_U(u0/e�c�v�c�O��p:
�c�O�: M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
R o u t i n g D o m a i n = < G U I D >
�pc�[�v�1u�}�W_U(u\S�d�S0
O(u ' G e t - N e t C o m p a r t m e n t ' R�Q�S(u�v�1u�}�W0
�la: ��N�c�O��{x�hV/e�cn�U�T&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
p r o v i d e r F i l t e r = Y e s
R o u t i n g D o m a i n = " { 1 1 1 1 1 1 1 1 - 1 1 1 1 - 1 1 1 1 - 1 1 1 1 - 1 1 1 1 1 1 1 1 1 0 0 1 } "
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " ( < G U I D 1 > , < G U I D 2 > ) "
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = ! " ( < G U I D 1 > , < G U I D 2 > ) "
V P N . U s e r N a m e = < U s e r N a m e / I n t e r f a c e N a m e >
�pc�[�vO(u�b�Nb�
T1z_U(u\S�d�S0
�la: ��N�c�O��{x�hV
N/e�c�{
W0n�Ub&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
p r o v i d e r F i l t e r = Y e s V P N . U s e r N a m e = " U s e r X X X "
�c�O�: M i c r o s o f t - W i n d o w s - T C P I P
T C P . A n y P o r t = < P O R T > , T C P . S o u r c e P o r t = < P O R T > , T C P . D e s t i n a t i o n P o r t = < P O R T >
AQ1�(W��GRc�[�v#��c�W
N6eƖ��d�0�N N�S�NP}TO(u
N��{x�hV0
T C P . A n y P o r t �SAQ1�(W�O�nb�v�v0W#��c�W&{TBf6eƖ��d�0
�la: ��N�c�O��{x�hV/e�cn�U0�{
W�T&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s
T C P . S o u r c e P o r t = 8 0 T C P . D e s t i n a t i o n P o r t = 1 2 3 4
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s T C P . A n y P o r t = ( 8 0 , 4 4 3 )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s T C P . S o u r c e P o r t = ! ( 9 0 0 - 1 0 0 0 )
P r o c e s s I d = < U�t z�^X�%R�x>
_U(u@b�U�t z�^X�%R�x�v E T W ��d�0
�la: ��N�c�O��{x�hV/e�c�{
W0n�U�T&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s P r o c e s s I d = 9 8 7
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s P r o c e s s I d = ( 1 , 5 , 8 , 9 )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s P r o c e s s I d = ! ( 1 0 0 - 2 0 0 )
I P v 4 . A d d r e s s = < I P v 4 MO@W>
I P v 4 . S o u r c e A d d r e s s = < I P v 4 MO@W>
I P v 4 . D e s t i n a t i o n A d d r e s s = < I P v 4 MO@W>
_U(u@b� I P v 4 MO@W�v E T W ��d�0
I P v 4 . A d d r e s s �SAQ1�(W�O�nb�v�v0WMO@W&{T�{x�Bf �2�L���d�
0�S TBfO(u�O�n�T�v�v0W�{x�
s i m u l t a n e o u s l y .
�la: ��N�c�O��{x�hV/e�cn�U0�{
W�T&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 4 . A d d r e s s = ( 2 . 0 . 0 . 0 - 3 . 0 . 0 . 0 )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 4 . S o u r c e A d d r e s s = ( 2 . 0 . 0 . 0 , 3 . 0 . 0 . 0 )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 4 . D e s t i n a t i o n A d d r e s s = ! ( 2 . 0 . 0 . 0 )
I P v 6 . A d d r e s s = < I P v 6 MO@W>
I P v 6 . S o u r c e A d d r e s s = < I P v 6 MO@W>
I P v 6 . D e s t i n a t i o n A d d r e s s = < I P v 6 MO@W>
_U(u@b� I P v 6 MO@W�v E T W ��d�0
I p v 6 . A d d r e s s �SAQ1�(W�O�nb�v�v0WMO@W&{T�{x�Bf2�L���d�0
�S TBfO(u�O�n�T�v�v0W�{x�0
�la: ��N�c�O��{x�hV/e�cn�U0�{
W�T&T�[0
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 6 . A d d r e s s = ( 2 0 0 1 : : 1 - 2 0 0 1 : : f f f f )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 6 . S o u r c e A d d r e s s = ( 2 0 0 1 : : 1 - 2 0 0 1 : : f f f f )
�O�Y: n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s I P v 6 . D e s t i n a t i o n A d d r e s s = ! ( 2 0 0 1 : : f f f f )
R o u t i n g D o m a i n = < G U I D >
�pc�[�v�1u�}�W_U(u\S�d�S0
O(u ' G e t - N e t C o m p a r t m e n t ' �OR�Q�S(u�v�1u�}�W0
�la: dk�c�O��{x�hV/e�cn�U�&T�[0
�O�Y n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s
R o u t i n g D o m a i n = " { B 1 0 6 2 9 8 2 - 2 B 1 8 - 4 B 4 F - B 3 D 5 - A 7 8 D D B 9 C D D 4 9 } "
�O�Y n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = " ( < G U I D 1 > , < G U I D 2 > ) "
�O�Y n e t s h t r a c e s t a r t
p r o v i d e r = M i c r o s o f t - W i n d o w s - T C P I P
p r o v i d e r F i l t e r = Y e s R o u t i n g D o m a i n = ! " ( < G U I D 1 > , < G U I D 2 > ) "
_
�la:
d��N�SY;�f�v�R ��c�O��{x��vO(u�e_GW��d�S�{x�
^�<O0�`�S�NO(u ' n e t s h t r a c e s h o w C a p t u r e F i l t e r H e l p '
�Oo�:y�d�S�{x��vO(u�e_
NR�c�O�/e�c�c�O��{x�0�`�S�NO(u NR}T�N
�O�j���c�O�yr�[��f:
M i c r o s o f t - W i n d o w s - T C P I P
' n e t s h t r a c e s h o w p r o v i d e r F i l t e r H e l p M i c r o s o f t - W i n d o w s - T C P I P '
M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e
' n e t s h t r a c e s h o w p r o v i d e r F i l t e r H e l p
M i c r o s o f t - W i n d o w s - R a s - N d i s W a n P a c k e t C a p t u r e '
�}��_gq�[b0
ck(W_U�R�}��_gq. . .
Hh�O�]/S�Q�jHh: % 1 ! w s !
vQ�N�Nb�aS % 1 :
YN*Y�}�aS % 1 :
T o k e n R i n g �Nb�aS % 1 :
F D D I �Nb�aS % 1 :
�V��Nb�aS % 1 :
P P P �Nb�aS % 1 :
S L I P �Nb�aS % 1 :
�S��Nb�aS % 1 :
!q�}@S�W�}��Nb�aS % 1 :
Nf�v�Nb�aS % 1 : }T�Nx�� " % 1 ! s ! "
Nck�x�v<P " % 2 ! s ! " 0 }T�Nx�� " % 1 ! s ! "
Nck�x�v<P " % 2 ! s ! " 0
N PbY P}T�N�v�Sxe
Nck�xbz�1Y0
PA �jHh " % 1 ! s ! " �]�}X[(W0
��d��]\O���k�](W2�L�-N0
!q�l_U�R��d��]\O���k ( /���= % 1 ! d ! ) 0
�_�t!j_ ���^����v M a x S i z e �Sxe0
�vMR�l g2�L�-N�v��d��]\O���k0
!q�l\Pbk��d��]\O���k ( /���= 0 x % 1 ! x ! ) 0
' % 1 ! s ! '
N/f gHeb�]�w�v�c�O�0
D��R!j_
NAQ1� O v e r w r i t e = y e s 0
!q�l_U�R6e�N#S�d�SE��R z_ ( /���= 0 x % 1 ! x ! ) 0
) ' % 1 ! s ! ' �a(u z_�]���[�}�-��[nj�e�^0
ˊܕ��r��a(u z_ �6q�_�Qf� N!k0
' % 1 ! s ! '
N/f gHe�vHh�O0
& !q�l\Hh�O ' % 1 ! s ! ' �e�X�d��]\O���k ( /���= 0 x % 2 ! x ! ) 0
" !q�l\\S�d�S�c�O��e�X�d��]\O���k ( /���= 0 x % 1 ! x ! ) 0
. !q�l\�_���v�v�Nܕo��c�O� ( % 1 ! s ! ) �e�X�d��]\O���k ( /���= 0 x % 2 ! x ! ) 0
c�[�vܕu�W[
\�e�c�O� ' % 1 ! s ! ' � �
N/f gHe�v0
PA c�[�vI{}
\�e�c�O� ' % 1 ! s ! ' � �
N/f gHe�v0
c�[�v�jHh ' % 1 ! s ! '
NX[(W0
I��c1YWe ( /���= 0 x % 1 ! x ! ) 0
' % 1 ! s ! '
N/f gHe�vK��{P[0
' % 1 ! s ! '
N/f gHe�v�{
W0
% 1 ! s !
N/f gHe�v�Nb�0
' % 1 ! s ! '
N/f gHe�v^��W0
�d�S�{x�hV�S g(W_U(u�d�SBfMbAQ1�0
ˊ�S�� ' t r a c e % 1 ! s ! h e l p ' �N�S�_s�0}��f0
' % 1 ! s ! ' /f�_���v�Sxe0
�}�:��e1YWe ( /���= 0 x % 1 ! x ! ) 0
' % 1 ! s ! ' �v{v���v!qHe ( /���= 0 x % 2 ! x ! ) 0
* vuc�[ S a v e S e s s i o n T r a c e = n o Bf �
NAQ1� R e p o r t = y e s 0
! ' % 1 ! w s ! '
N/f gHe�vTS�R z_^�%R �b/f�S��
*gck�x�[݈0
< !q�lO(u - ˊ�j�gTS�R z_^�%R{v�>
�v�Nܕo�1YWe ( /���= 0 x % 1 ! x ! ) 0
~b
N0R;m�R " % 1 ! s ! " 0
' }T�Nx�� " % 1 ! s ! " �v<P " % 2 ! s ! " !qHe - �_�/f G U I D 0
c�[�v_ ' % 1 ! s ! '
NX[(W0
�S g(W_U(u�d�SBf �Mb��O(u C a p t u r e T y p e �Sxe0
dk C a p t u r e T y p e
Ni�(u�edk�|q}�v�g�i0
�[݈ H y p e r - V ҉r�KN�_ �Mb��_U(u[��d�N�chV�d�S0
��d��jHhTuO1YWe ( /���= 0 x % 1 ! x ! ) 0
% 1 ! s !
N/f gHe�v�1u�}�W0
PA f�JT: !q�l\Pbk6e�N#S�d�SE��R z_ ( /���= 0 x % 1 ! x ! ) 0
f�JT: !q�l2QX[�]\O���knj
� ( /���= 0 x % 1 ! x ! ) 0
f�JT: "u u1XJT1YWe ( /���= 0 x % 1 ! x ! ) 0
3 f�JT: ' N T K e r n e l L o g g e r ' �v�O��]�}(W�WL�0
Ng\�|q}nj
��e�X�d��jHh0
! f�JT:
Ng\�|q}nj
��e�X�d��jHh0( /���= 0 x % 1 ! x ! ) 0
! f�JT: !q�l�d�STS�R z_^�%Rl\'` ( /���= 0 x % 1 ! 0 8 X ! ) 0
f�JT: N D F ��d��jHh!q�lO(u0
& f�JT: �V�p g'Yϑ�v�N�N �@b�N*g�d�S�g�N�N�N0
ˊ�naO(u�{x�hV�On\xeϑ
f�JT: �[hQ!j_-N
N/e�c1XJT"u u0
f�JT: �[hQ!j_-N
N/e�c\S�d�S0
PA ܕ�� ��_U /f &T �}�:��eG � Pnj�e6eƖhVƖT�]wQg(W,g_j�|q}
N6eƖ�}�vܕ�vnj�e0��6eƖ�vnj�eS�b�}�CQ�N��d�0{v�_j�x ��N�S�STS�R�u㖒c㉲}�vܕOUL��v�|q}lxԚnj
�0 M i c r o s o f t W i n d o w s �}��d� M i c r o s o f t �}�nj
�6eƖhV �]\P(u 0 0L 0 0l P P| � �� � �� �� a� �c� �� ���Y
\Pbk
�P�
͑'Y
/���
f�JT
nj
�
s�0}nj
�
\ M i c r o s o f t - W i n d o w s - N e t w o r k i n g - C o r r e l a t i o n
p M i c r o s o f t - W i n d o w s - N e t w o r k i n g - C o r r e l a t i o n / D i a g n o s t i c
` D u m m y e v e n t f o r s t a n d a r d l e v e l e n u m e r a t i o n
H S o u r c e P r o v i d e r : % 1 C o n t e x t : % 2
H S o u r c e P r o v i d e r : % 1 C o n t e x t : % 2
H S o u r c e P r o v i d e r : % 1 C o n t e x t : % 2
�4 V S _ V E R S I O N _ I N F O ��
aJ
aJ? � S t r i n g F i l e I n f o � 0 4 0 4 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n : F i l e D e s c r i p t i o n �}��d�TS�R z_ h $ F i l e V e r s i o n 1 0 . 0 . 1 9 0 4 1 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) :
I n t e r n a l N a m e n e t t r a c e . d l l � . L e g a l C o p y r i g h t � M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . J O r i g i n a l F i l e n a m e n e t t r a c e . d l l . m u i j % P r o d u c t N a m e M i c r o s o f t � W i n d o w s � O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 9 0 4 1 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n �PADDINGXXPADDINGPADDINGX