Network trace from Server Core

Network trace from Server Core

Q. I have a Server Core deployment and need to perform a network trace. How do I do this without a graphical interface?

A. With Message Analyzer and PowerShell it is possible to remotely trace a machine including a Server Core instance (providing the required ports are open for RPC and WinRM). If this is not an option you can also capture locally using the following:

netsh trace start capture=yes
<perform the actions you wish to capture>
netsh trace stop

Take the ETL file generated and open in Message Analyzer.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.