Updated: March 28, 2003
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
Netcap.exe: Network Monitor Capture Utility
This command-line tool allows a system administrator to monitor packets on a LAN and write the information to a log file. NetCap uses the Network Monitor Driver to sniff packets on local network segments.
You must run NetCap from the command window.
If the Network Monitor Driver is not installed, NetCap installs it the first time the tool is run. To remove the driver, use netcap /remove.
This tool provides a command-line interface to some of the capture functionality of Netmon.
NetCap captures frames directly from the network traffic data stream so they can be examined. You can use it to create capture files for support personnel.
Frames are packages of information transmitted as a single unit over a network. Every frame follows the same basic organization and contains the following:
Control information such as synchronizing characters
Source and destination addresses
An error-checking value
A variable amount of data
NetCap requires one of the following operating systems:
Windows Server 2003
Windows XP Professional