Tag: Bandwidth

Produces a native Windows network trace in etl format, downloads a signed Microsoft utility from GitHub and runs that to convert the etl file to a pcapng file that Wireshark can open.
After successful conversion the source etl trace will be deleted, leaving the converted file whose name and location will be in the output window.
Specifying output files on network shares may not work as the script needs to run as system so may not have access.
Address filters can be a comma separated list of IP addresses or resolveable names or leave blank to not filter.
Protocol filters can be a comma separated list of TCP, UDP, ICMP, IGMP or leave blank to not filter.
Ether type filters can be a comma separated list of IPv4, IPv6, ARP, etc or leave blank to not filter.
https://github.com/microsoft/etl2pcapng

Capture and analyse network traffic sent for the specified process in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used and the amount of data sent in the capture period.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n destinations (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

Capture and analyse network traffic sent for all processes in the specified session in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used, the amount of data sent in the capture period and the processes involved.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n destinations (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

Capture and analyse network traffic sent for all processes on the selected computer in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used, the amount of data sent in the capture period and the processes involved.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n destinations (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

Capture and analyse network traffic received for all processes on the specified computer in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used, the amount of data received in the capture period and the processes involved.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n sources (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

Capture and analyse network traffic received for all processes in the specified sessions in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used, the amount of data received in the capture period and the processes involved.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n sources (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

Capture and analyse network traffic received for the specified process in a specified time period, showing the IP addresses and DNS names of the remote systems, the port used, the amount of data received in the capture period.
Arguments:
Capture Time - the number of seconds to run a network capture for (default 15 seconds)
Show top - show only the top n sources (default is 10)

Credits: based on "Capture Network IO for process" SBA by Andrew Morgan

This script provides statistics for a given VMware Blast session

This script measures the bandwidth of a given active HDX session, and breaks down the bandwidth consumption into the most useable ICA virtual channels. The output shows the bandwidth usage in kbps (kilobits per second) of each virtual channel and the total session. This version shows only the session output (download), and not the upload.