nettrace.dll.mui Network Trace Helper bda3bd09e669072299677076ad2001bd

  1. File Info
  2. MUI

File info

File name: nettrace.dll.mui
Size: 57856 byte
MD5: bda3bd09e669072299677076ad2001bd
SHA1: 703b7373cc31fd794ca49482e51c245925af0c54
SHA256: b88fbee140c0879adba3f958aa6da840a4f5b779ced7e66db24089d277e6a0ea
Operating systems: Windows 10
Extension: MUI

Translations messages and strings

If an error occurred or the following message in English (U.S.) language and you cannot find a solution, than check answer in English. Table below helps to know how correctly this phrase sounds in English.

id English (U.S.) English
6000List interfaces, providers and tracing state.
 List interfaces, providers and tracing state.
6100Starts tracing.
 Starts tracing.
6101
%1!s!
Starts tracing.

Usage: trace start [[scenario=]]
[[globalKeywords=]keywords] [[globalLevel=]level]
[[capture=]yes|no] [[capturetype=]physical|vmswitch|both]
[[report=]yes|no|disabled] [[persistent=]yes|no]
[[traceFile=]path\filename] [[maxSize=]filemaxsize]
[[fileMode=]single|circular|append] [[overwrite=]yes|no]
[[correlation=]yes|no|disabled] [capturefilters]
[[provider=]providerIdOrName] [[keywords=]keywordMaskOrSet]
[[level=]level]
[[[provider=]provider2IdOrName] [[providerFilter=]yes|no]]
[[keywords=]keyword2MaskOrSet] [[perfMerge=]yes|no]
[[level=]level2] ...

Defaults:
capture=no (specifies whether packet capture is enabled
in addition to trace events)
capturetype=physical (specifies whether packet capture needs to be
enabled for physical network adapters only, virtual switch
only, or both physical network adapters and virtual switch)
report=no (specifies whether a complementing report will be generated
along with the trace file)
persistent=no (specifies whether the tracing session continues
across reboots, and is on until netsh trace stop is issued)
maxSize=250 MB (specifies the maximum trace file size, 0=no maximum)
fileMode=circular
overwrite=yes (specifies whether an existing trace output file will
be overwritten)
correlation=yes (specifies whether related events will be correlated
and grouped together)
perfMerge=yes (specifies whether performance metadata is merged
into trace)
traceFile=%%LOCALAPPDATA%%\Temp\NetTraces\NetTrace.etl
(specifies location of the output file)
providerFilter=no (specifies whether provider filter is enabled)

Provider keywords default to all and level to 255 unless otherwise specified.

For example:

netsh trace start scenario=InternetClient capture=yes

Starts tracing for the InternetClient scenario and dependent providers
with packet capture enabled for physical network adapters only.
Tracing will stop when the "netsh trace stop" command is issued
or when the system reboots.
Default location and name will be used for the output file. If an old
file exists, it will be overwritten.

netsh trace start provider=microsoft-windows-wlan-autoconfig
keywords=state,ut:authentication

Starts tracing for the microsoft-windows-wlan-autoconfig provider
Tracing will stop when the "netsh trace stop" command is issued
or when the system reboots.
Default location and name will be used for the output file. If an old
file exists, it will be overwritten.
Only events with keyword 'state' or 'ut:authentication' will be logged.

netsh trace show provider command can be used to display
supported keywords and levels.

Capture Filters:
Capture filters are only supported when capture is explicitly
enabled with capture=yes. Use 'netsh trace show CaptureFilterHelp'
to display a list of supported capture filters and their usage.

Provider Filters:
Provider filters are supported by multiple providers and are enabled
with providerFilter=Yes after every provider.
Use 'netsh trace show ProviderFilterHelp' to display a list of
supported provider filters for each provider and their usage.
%1!s!
Starts tracing.

Usage: trace start [[scenario=]]
[[globalKeywords=]keywords] [[globalLevel=]level]
[[capture=]yes|no] [[capturetype=]physical|vmswitch|both]
[[report=]yes|no|disabled] [[persistent=]yes|no]
[[traceFile=]path\filename] [[maxSize=]filemaxsize]
[[fileMode=]single|circular|append] [[overwrite=]yes|no]
[[correlation=]yes|no|disabled] [capturefilters]
[[provider=]providerIdOrName] [[keywords=]keywordMaskOrSet]
[[level=]level]
[[[provider=]provider2IdOrName] [[providerFilter=]yes|no]]
[[keywords=]keyword2MaskOrSet] [[perfMerge=]yes|no]
[[level=]level2] ...

Defaults:
capture=no (specifies whether packet capture is enabled
in addition to trace events)
capturetype=physical (specifies whether packet capture needs to be
enabled for physical network adapters only, virtual switch
only, or both physical network adapters and virtual switch)
report=no (specifies whether a complementing report will be generated
along with the trace file)
persistent=no (specifies whether the tracing session continues
across reboots, and is on until netsh trace stop is issued)
maxSize=250 MB (specifies the maximum trace file size, 0=no maximum)
fileMode=circular
overwrite=yes (specifies whether an existing trace output file will
be overwritten)
correlation=yes (specifies whether related events will be correlated
and grouped together)
perfMerge=yes (specifies whether performance metadata is merged
into trace)
traceFile=%%LOCALAPPDATA%%\Temp\NetTraces\NetTrace.etl
(specifies location of the output file)
providerFilter=no (specifies whether provider filter is enabled)

Provider keywords default to all and level to 255 unless otherwise specified.

For example:

netsh trace start scenario=InternetClient capture=yes

Starts tracing for the InternetClient scenario and dependent providers
with packet capture enabled for physical network adapters only.
Tracing will stop when the "netsh trace stop" command is issued
or when the system reboots.
Default location and name will be used for the output file. If an old
file exists, it will be overwritten.

netsh trace start provider=microsoft-windows-wlan-autoconfig
keywords=state,ut:authentication

Starts tracing for the microsoft-windows-wlan-autoconfig provider
Tracing will stop when the "netsh trace stop" command is issued
or when the system reboots.
Default location and name will be used for the output file. If an old
file exists, it will be overwritten.
Only events with keyword 'state' or 'ut:authentication' will be logged.

netsh trace show provider command can be used to display
supported keywords and levels.

Capture Filters:
Capture filters are only supported when capture is explicitly
enabled with capture=yes. Use 'netsh trace show CaptureFilterHelp'
to display a list of supported capture filters and their usage.

Provider Filters:
Provider filters are supported by multiple providers and are enabled
with providerFilter=Yes after every provider.
Use 'netsh trace show ProviderFilterHelp' to display a list of
supported provider filters for each provider and their usage.
6102Stops tracing.
 Stops tracing.
6103
%1!s!

Stops tracing.

Remarks: Stops a network tracing session currently in progress
%1!s!

Stops tracing.

Remarks: Stops a network tracing session currently in progress
6104Converts a trace file to an HTML report.
 Converts a trace file to an HTML report.
6105
%1!s!

Converts a trace file to an HTML report.

Usage: convert [input=]tracefilename.etl [[output=]filename]
[[dump=]CSV|XML|EVTX|TXT|No] [[report=]yes|no]
[[overwrite=]yes|no] [[tmfpath=]pathname]

Parameters:

Tag Value
input - Input ETL trace file
output - Output file name (defaults to input name)
dump - Output format (default = TXT)
report - Generates an HTML report (default = no)
overwrite - Overwrites existing files (default = no)
tmfpath - Path to tmf files for decoding WPP traces

Remarks: Converts the input ETL file to the specified format.

%1!s!

Converts a trace file to an HTML report.

Usage: convert [input=]tracefilename.etl [[output=]filename]
[[dump=]CSV|XML|EVTX|TXT|No] [[report=]yes|no]
[[overwrite=]yes|no] [[tmfpath=]pathname]

Parameters:

Tag Value
input - Input ETL trace file
output - Output file name (defaults to input name)
dump - Output format (default = TXT)
report - Generates an HTML report (default = no)
overwrite - Overwrites existing files (default = no)
tmfpath - Path to tmf files for decoding WPP traces

Remarks: Converts the input ETL file to the specified format.
6106Start a diagnose session.
 Start a diagnose session.
6107
%1!s!

Starts a diagnose session.

Usage: diagnose [scenario=] [[namedAttribute=]]
[[saveSessionTrace=]] [[report=]] [[capture=]]

Defaults:
saveSessionTrace=no (defaults to 'yes' if report=yes is specified)
capture=no
report=no

Remarks: Starts a diagnose session

%1!s!

Starts a diagnose session.

Usage: diagnose [scenario=] [[namedAttribute=]]
[[saveSessionTrace=]] [[report=]] [[capture=]]

Defaults:
saveSessionTrace=no (defaults to 'yes' if report=yes is specified)
capture=no
report=no

Remarks: Starts a diagnose session
6108Normalizes or filters a trace file to a new output file.
 Normalizes or filters a trace file to a new output file.
6109
%1!s!
Normalizes or filters a trace file to a new output file.

Usage: trace correlate [input=]tracefilename.etl
[output=]newtracefilename.etl
[[filter=]Activity_ID] [[overwrite=]yes|no]
[[retaincorrelationevents=]yes|no] [[retainpii=]yes|no] [[retainglobalevents=]yes|no]

Parameters:

Tag Value
input - Input ETL trace file
output - Output file name
filter - Output only events related to this Activity GUID
overwrite - Overwrites existing files
retaincorrelationevents - Retains correlation events
retainpii - Retains events containing personally identifiable information
retainglobalevents - Retains global events

Defaults:
filter=none
overwrite=no
retaincorrevents=no
retainpii=yes
retainglobalevents=yes

Remarks:
Filter activity ID is a GUID expressed in the form {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
Personally identifiable information includes packet capture events

%1!s!
Normalizes or filters a trace file to a new output file.

Usage: trace correlate [input=]tracefilename.etl
[output=]newtracefilename.etl
[[filter=]Activity_ID] [[overwrite=]yes|no]
[[retaincorrelationevents=]yes|no] [[retainpii=]yes|no] [[retainglobalevents=]yes|no]

Parameters:

Tag Value
input - Input ETL trace file
output - Output file name
filter - Output only events related to this Activity GUID
overwrite - Overwrites existing files
retaincorrelationevents - Retains correlation events
retainpii - Retains events containing personally identifiable information
retainglobalevents - Retains global events

Defaults:
filter=none
overwrite=no
retaincorrevents=no
retainpii=yes
retainglobalevents=yes

Remarks:
Filter activity ID is a GUID expressed in the form {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
Personally identifiable information includes packet capture events
6110Merges trace files and adds symbols metadata.
 Merges trace files and adds symbols metadata.
6111
%1!s!

Merges trace files and adds symbols metadata.

Usage: merge input1.etl input2.etl ... output.etl

Parameters:

A list of ETL files to merge
The last file in the list is an output

Remarks: Merges the files and injects symbols and PerfTrack metadata.

%1!s!

Merges trace files and adds symbols metadata.

Usage: merge input1.etl input2.etl ... output.etl

Parameters:

A list of ETL files to merge
The last file in the list is an output

Remarks: Merges the files and injects symbols and PerfTrack metadata.
6114
6201Shows tracing configuration.
 Shows tracing configuration.
6202
%1!s!

Shows tracing configuration.
%1!s!

Shows tracing configuration.
6203Shows available scenarios.
 Shows available scenarios.
6204
%1!s!

Shows a list of available scenarios that may be used with the start command.
%1!s!

Shows a list of available scenarios that may be used with the start command.
6205Shows scenario information.
 Shows scenario information.
6206
%1!s!

Shows scenario information.

Usage: trace show scenario [name=]

Remarks: This displays additional information about a scenario including
any attributes that may be required by the 'diagnose command and
the list of providers that would be enabled for the specified
scenario, along with the default keywords and levels that would
be applied.

%1!s!

Shows scenario information.

Usage: trace show scenario [name=]

Remarks: This displays additional information about a scenario including
any attributes that may be required by the 'diagnose command and
the list of providers that would be enabled for the specified
scenario, along with the default keywords and levels that would
be applied.
6207Shows available providers.
 Shows available providers.
6208
%1!s!

Shows a list of available providers that may be used with the start command.
%1!s!

Shows a list of available providers that may be used with the start command.
6209Shows provider information.
 Shows provider information.
6210
%1!s!

Shows provider information that can be used with the start command.

Usage: trace show provider [name=]

Remarks: This displays the keywords and levels that the specified
provider supports. These keywords and levels may be used
while starting a tracing session.

%1!s!

Shows provider information that can be used with the start command.

Usage: trace show provider [name=]

Remarks: This displays the keywords and levels that the specified
provider supports. These keywords and levels may be used
while starting a tracing session.
6211List global keywords and levels.
 List global keywords and levels.
6212
%1!s!

Shows a list of global keywords and levels that may be used with the
start command.

Usage: trace show globalKeywordsAndLevels
%1!s!

Shows a list of global keywords and levels that may be used with the
start command.

Usage: trace show globalKeywordsAndLevels
6213List available interfaces.
 List available interfaces.
6214
%1!s!

Shows a list of network interfaces.

Usage: trace show interfaces
%1!s!

Shows a list of network interfaces.

Usage: trace show interfaces
6215List supported capture filters and usage.
 List supported capture filters and usage.
6216
%1!s!

List supported capture filters and usage.

Usage: trace show CaptureFilterHelp

%1!s!

List supported capture filters and usage.

Usage: trace show CaptureFilterHelp
6217Show helper class information.
 Show helper class information.
6218
%1!s!

Shows helper class name, description and list of dependent helper classes.
This also lists possible root causes and repairs that may be returned by
the helper class.

Usage: trace show helperclass [name=]

%1!s!

Shows helper class name, description and list of dependent helper classes.
This also lists possible root causes and repairs that may be returned by
the helper class.

Usage: trace show helperclass [name=]
6219List supported provider filters and usage.
 List supported provider filters and usage.
6220
%1!s!

List supported provider filters and usage.

Usage: trace show ProviderFilterHelp

%1!s!

List supported provider filters and usage.

Usage: trace show ProviderFilterHelp
6301
Trace configuration:
-------------------------------------------------------------------
Trace configuration:
-------------------------------------------------------------------
6302File location = %1!s!
 File location = %1!s!
6303
Available scenarios (%1!d!):
-------------------------------------------------------------------
Available scenarios (%1!d!):
-------------------------------------------------------------------
6305
Entry Point: %1!ws!
Entry Point: %1!ws!
6306
Providers
---------
Providers
---------
6307
Available Providers (%1!d!)
-------------------------------------------------------------------
Available Providers (%1!d!)
-------------------------------------------------------------------
6308
Name: %1!s!
Provider Guid: %2!s!
Name: %1!s!
Provider Guid: %2!s!
6309
Levels (value) - %1!d! element(s)
-------------------------------------------------------------------
Levels (value) - %1!d! element(s)
-------------------------------------------------------------------
6310
Keywords (mask) - %1!d! element(s)
-------------------------------------------------------------------
Keywords (mask) - %1!d! element(s)
-------------------------------------------------------------------
6311Tracing session was successfully stopped.
 Tracing session was successfully stopped.
6312Status: Running
Trace File: %1!s!
Append: %2!s!
Circular: %3!s!
Max Size: %4!s!
Report: %5!s!
 Status: Running
Trace File: %1!s!
Append: %2!s!
Circular: %3!s!
Max Size: %4!s!
Report: %5!s!
6313
Provider:
Name: %1!s!
Provider Guid: %2!s!
Level: %3!s!
Keywords: %4!s!
Provider:
Name: %1!s!
Provider Guid: %2!s!
Level: %3!s!
Keywords: %4!s!
6314
Provider:
Name: %1!s!
Provider Guid: %2!s!
Default Level: %3!s!
Default Keywords: %4!s!
Provider:
Name: %1!s!
Provider Guid: %2!s!
Default Level: %3!s!
Default Keywords: %4!s!
6315Report location = %1!s!
 Report location = %1!s!
6316
Input file: %1!s!
Dump file: %2!s!
Dump format: %3!s!
Report file: %4!s!

Input file: %1!s!
Dump file: %2!s!
Dump format: %3!s!
Report file: %4!s!
6318
Description: %1!ws!
Interface GUID: %2!S!
Interface Index: %3!d!
Interface Luid: 0x%4!I64X!

Description: %1!ws!
Interface GUID: %2!S!
Interface Index: %3!d!
Interface Luid: 0x%4!I64X!
6319
Attribute Name Type Required Description
-------------- ---- -------- -----------

Attribute Name Type Required Description
-------------- ---- -------- -----------
6320
Root causes found: %1!d!

Root causes found: %1!d!
6321
Root cause #%1!d!
--------------
%2!ws!

Root cause #%1!d!
--------------
%2!ws!
6322
Repairs available: %1!d!

Repairs available: %1!d!
6323
Repair #%1!d!
----------
%2!ws!

Repair #%1!d!
----------
%2!ws!
6324
Diagnosing '%1!ws!' ...
Diagnosing '%1!ws!' ...
6325done
done
6326
Description: %1!ws!
Description: %1!ws!
6327
NDF Trace File: '%1!ws!'

NDF Trace File: '%1!ws!'
6328NDF Report File: '%1!ws!'
NDF Report File: '%1!ws!'
6329Generating data collection and report ... Generating data collection and report ...
6330Generating dump ... Generating dump ...
6331done
 done
6332failed (error=0x%1!X!)
 failed (error=0x%1!X!)
6333
Capture Filters:
Capture filters are only supported when capture is explicitly
enabled with capture=yes. Supported capture filters are:

CaptureInterface=
Enables packet capture for the specified interface name or GUID. Use
'netsh trace show interfaces' to list available interfaces.
e.g. CaptureInterface={716A7812-4AEE-4545-9D00-C10EFD223551}
e.g. CaptureInterface=!{716A7812-4AEE-4545-9D00-C10EFD223551}
e.g. CaptureInterface="Local Area Connection"

Ethernet.Address=
Matches the specified filter against both source and destination
MAC addresses.
e.g. Ethernet.Address=00-0D-56-1F-73-64

Ethernet.SourceAddress=
Matches the specified filter against source MAC addresses.
e.g. Ethernet.SourceAddress=00-0D-56-1F-73-64

Ethernet.DestinationAddress=
Matches the specified filter against destination MAC addresses.
e.g. Ethernet.DestinationAddress=00-0D-56-1F-73-64

Ethernet.Type=
Matches the specified filter against the MAC ethertype.
e.g. Ethernet.Type=IPv4
e.g. Ethernet.Type=NOT(0x86DD)
e.g. Ethernet.Type=(IPv4,IPv6)

Wifi.Type=
Matches the specified filter against the Wifi type. Allowed values
are 'Management' and 'Data'. If not specified, the Wifi.Type filter
is not applied.
Note: This capture filter does not support ranges, lists or negation.
e.g. Wifi.Type=Management

Protocol=
Matches the specified filter against the IP protocol.
e.g. Protocol=6
e.g. Protocol=!(TCP,UDP)
e.g. Protocol=(4-10)

IPv4.Address=
Matches the specified filter against both source and destination
IPv4 addresses.
e.g. IPv4.Address=157.59.136.1
e.g. IPv4.Address=!(157.59.136.1)
e.g. IPv4.Address=(157.59.136.1,157.59.136.11)

IPv4.SourceAddress=
Matches the specified filter against source IPv4 addresses.
e.g. IPv4.SourceAddress=157.59.136.1

IPv4.DestinationAddress=
Matches the specified filter against destination IPv4 addresses.
e.g. IPv4.DestinationAddress=157.59.136.1

IPv6.Address=
Matches the specified filter against both source and destination
IPv6 addresses.
e.g. IPv6.Address=fe80::5038:3c4:35de:f4c3\%%8
e.g. IPv6.Address=!(fe80::5038:3c4:35de:f4c3\%%8)

IPv6.SourceAddress=
Matches the specified filter against source IPv6 addresses.
e.g. IPv6.SourceAddress=fe80::5038:3c4:35de:f4c3\%%8

IPv6.DestinationAddress=
Matches the specified filter against destination IPv6 addresses.
e.g. IPv6.DestinationAddress=fe80::5038:3c4:35de:f4c3\%%8

CustomMac=
Matches the specified filter against the value at the specified
offset starting with the MAC header.
Note: This capture filter does not support ranges, lists or negation.
e.g. CustomMac=UINT8(0x1,0x23)
e.g. CustomMac=ASCIISTRING(3,test)
e.g. CustomMac=UNICODESTRING(2,test)

CustomIp=
Matches the specified filter against the value at the specified
offset starting with the IP header.
Note: This capture filter does not support ranges, lists or negation.
e.g. CustomIp=UINT16(4,0x3201)
e.g. CustomIp=UINT32(0x2,18932)

CaptureMultiLayer=
Enables multi-layer packet capture.
Note: This capture filter does not support ranges, lists or negation.

PacketTruncateBytes=
Captures only the the specified number of bytes of each packet.
Note: This capture filter does not support ranges, lists or negation.
e.g. PacketTruncateBytes=40

Capture Filters:
Capture filters are only supported when capture is explicitly
enabled with capture=yes. Supported capture filters are:

CaptureInterface=
Enables packet capture for the specified interface name or GUID. Use
'netsh trace show interfaces' to list available interfaces.
e.g. CaptureInterface={716A7812-4AEE-4545-9D00-C10EFD223551}
e.g. CaptureInterface=!{716A7812-4AEE-4545-9D00-C10EFD223551}
e.g. CaptureInterface="Local Area Connection"

Ethernet.Address=
Matches the specified filter against both source and destination
MAC addresses.
e.g. Ethernet.Address=00-0D-56-1F-73-64

Ethernet.SourceAddress=
Matches the specified filter against source MAC addresses.
e.g. Ethernet.SourceAddress=00-0D-56-1F-73-64

Ethernet.DestinationAddress=
Matches the specified filter against destination MAC addresses.
e.g. Ethernet.DestinationAddress=00-0D-56-1F-73-64

Ethernet.Type=
Matches the specified filter against the MAC ethertype.
e.g. Ethernet.Type=IPv4
e.g. Ethernet.Type=NOT(0x86DD)
e.g. Ethernet.Type=(IPv4,IPv6)

Wifi.Type=
Matches the specified filter against the Wifi type. Allowed values
are 'Management' and 'Data'. If not specified, the Wifi.Type filter
is not applied.
Note: This capture filter does not support ranges, lists or negation.
e.g. Wifi.Type=Management

Protocol=
Matches the specified filter against the IP protocol.
e.g. Protocol=6
e.g. Protocol=!(TCP,UDP)
e.g. Protocol=(4-10)

IPv4.Address=
Matches the specified filter against both source and destination
IPv4 addresses.
e.g. IPv4.Address=157.59.136.1
e.g. IPv4.Address=!(157.59.136.1)
e.g. IPv4.Address=(157.59.136.1,157.59.136.11)

IPv4.SourceAddress=
Matches the specified filter against source IPv4 addresses.
e.g. IPv4.SourceAddress=157.59.136.1

IPv4.DestinationAddress=
Matches the specified filter against destination IPv4 addresses.
e.g. IPv4.DestinationAddress=157.59.136.1

IPv6.Address=
Matches the specified filter against both source and destination
IPv6 addresses.
e.g. IPv6.Address=fe80::5038:3c4:35de:f4c3\%%8
e.g. IPv6.Address=!(fe80::5038:3c4:35de:f4c3\%%8)

IPv6.SourceAddress=
Matches the specified filter against source IPv6 addresses.
e.g. IPv6.SourceAddress=fe80::5038:3c4:35de:f4c3\%%8

IPv6.DestinationAddress=
Matches the specified filter against destination IPv6 addresses.
e.g. IPv6.DestinationAddress=fe80::5038:3c4:35de:f4c3\%%8

CustomMac=
Matches the specified filter against the value at the specified
offset starting with the MAC header.
Note: This capture filter does not support ranges, lists or negation.
e.g. CustomMac=UINT8(0x1,0x23)
e.g. CustomMac=ASCIISTRING(3,test)
e.g. CustomMac=UNICODESTRING(2,test)

CustomIp=
Matches the specified filter against the value at the specified
offset starting with the IP header.
Note: This capture filter does not support ranges, lists or negation.
e.g. CustomIp=UINT16(4,0x3201)
e.g. CustomIp=UINT32(0x2,18932)

CaptureMultiLayer=
Enables multi-layer packet capture.
Note: This capture filter does not support ranges, lists or negation.

PacketTruncateBytes=
Captures only the the specified number of bytes of each packet.
Note: This capture filter does not support ranges, lists or negation.
e.g. PacketTruncateBytes=40
6334
Note:
Multiple filters may be used together. However the same filter may
not be repeated.
e.g. 'netsh trace start capture=yes Ethernet.Type=IPv4
IPv4.Address=157.59.136.1'

Filters need to be explicitly stated when required. If a filter is
not specified, it is treated as "don't-care".
e.g. 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1'
This will capture IPv4 packets only from 157.59.136.1, and it
will also capture packets with non-IPv4 Ethernet Types, since
the Ethernet.Type filter is not explicitly specified.
e.g. 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1
Ethernet.Type=IPv4'
This will capture IPv4 packets only from 157.59.136.1. Packets
with other Ethernet Types will be discarded since an explicit
filter has been specified.

Capture filters support ranges, lists and negation (unless stated
otherwise).
e.g. Range: 'netsh trace start capture=yes Ethernet.Type=IPv4
Protocol=(4-10)'
This will capture IPv4 packets with protocols between 4 and 10
inclusive.
e.g. List: 'netsh trace start capture=yes Ethernet.Type=(IPv4,IPv6)'
This will capture only IPv4 and IPv6 packets.
e.g. Negation: 'netsh trace start capture=yes Ethernet.Type=!IPv4'
This will capture all non-IPv4 packets.

Negation may be combined with lists in some cases.
e.g. 'netsh trace start capture=yes Ethernet.Type=!(IPv4,IPv6)'
This will capture all non-IPv4 and non-IPv6 packets.

'NOT' can be used instead of '!' to indicate negation. This requires
parentheses to be present around the values to be negated.
e.g. 'netsh trace start capture=yes Ethernet.Type=NOT(IPv4)'

Note:
Multiple filters may be used together. However the same filter may
not be repeated.
e.g. 'netsh trace start capture=yes Ethernet.Type=IPv4
IPv4.Address=157.59.136.1'

Filters need to be explicitly stated when required. If a filter is
not specified, it is treated as "don't-care".
e.g. 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1'
This will capture IPv4 packets only from 157.59.136.1, and it
will also capture packets with non-IPv4 Ethernet Types, since
the Ethernet.Type filter is not explicitly specified.
e.g. 'netsh trace start capture=yes IPv4.SourceAddress=157.59.136.1
Ethernet.Type=IPv4'
This will capture IPv4 packets only from 157.59.136.1. Packets
with other Ethernet Types will be discarded since an explicit
filter has been specified.

Capture filters support ranges, lists and negation (unless stated
otherwise).
e.g. Range: 'netsh trace start capture=yes Ethernet.Type=IPv4
Protocol=(4-10)'
This will capture IPv4 packets with protocols between 4 and 10
inclusive.
e.g. List: 'netsh trace start capture=yes Ethernet.Type=(IPv4,IPv6)'
This will capture only IPv4 and IPv6 packets.
e.g. Negation: 'netsh trace start capture=yes Ethernet.Type=!IPv4'
This will capture all non-IPv4 packets.

Negation may be combined with lists in some cases.
e.g. 'netsh trace start capture=yes Ethernet.Type=!(IPv4,IPv6)'
This will capture all non-IPv4 and non-IPv6 packets.

'NOT' can be used instead of '!' to indicate negation. This requires
parentheses to be present around the values to be negated.
e.g. 'netsh trace start capture=yes Ethernet.Type=NOT(IPv4)'
6335
Name: %1!ws!
Description: %2!ws!

Name: %1!ws!
Description: %2!ws!
6336
Dependent Helper Classes:
Helper Class Name Description
----------------- -----------

Dependent Helper Classes:
Helper Class Name Description
----------------- -----------
6337
Root Cause %1!d!/%2!d!
----------------
Description: %3!ws!
ID: %4!ws!

Root Cause %1!d!/%2!d!
----------------
Description: %3!ws!
ID: %4!ws!
6338
Repair %1!d!/%2!d!
------------
Description: %3!ws!
ID: %4!ws!

Repair %1!d!/%2!d!
------------
Description: %3!ws!
ID: %4!ws!
6339
Input file: %1!s!
Output file: %2!s!
Filter: %3!s!
Overwrite: %4!s!
RetainCorrelationEvents: %5!s!
RetainPII: %6!s!
RetainGlobalEvents: %7!s!

Input file: %1!s!
Output file: %2!s!
Filter: %3!s!
Overwrite: %4!s!
RetainCorrelationEvents: %5!s!
RetainPII: %6!s!
RetainGlobalEvents: %7!s!
6340Correlating traces ... Correlating traces ...
6341The trace file and additional troubleshooting information have been compiled as "%1!s!".
 The trace file and additional troubleshooting information have been compiled as "%1!s!".
6342Generating data collection ... Generating data collection ...
6343Merging traces ... Merging traces ...
6344
Provider Filters:
Provider filters are supported by multiple providers and are enabled
with providerFilter=Yes after every provider. Supported providers are:

Provider: Microsoft-Windows-Ras-NdisWanPacketCapture
RoutingDomain=
Enables packet capture for the specified routing domain.
Use 'Get-NetCompartment' to list available routing domains.
Note: This provider filter supports lists and negations.
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes
RoutingDomain="{11111111-1111-1111-1111-111111111001}"
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes RoutingDomain="(,)"
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes RoutingDomain=!"(,)"

VPN.UserName=
Enables packet capture for specified user or interface name.
Note: This provider filter does not support ranges, lists or negation.
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes VPN.UserName="UserXXX"

Provider Filters:
Provider filters are supported by multiple providers and are enabled
with providerFilter=Yes after every provider. Supported providers are:

Provider: Microsoft-Windows-Ras-NdisWanPacketCapture
RoutingDomain=
Enables packet capture for the specified routing domain.
Use 'Get-NetCompartment' to list available routing domains.
Note: This provider filter supports lists and negations.
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes
RoutingDomain="{11111111-1111-1111-1111-111111111001}"
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes RoutingDomain="(,)"
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes RoutingDomain=!"(,)"

VPN.UserName=
Enables packet capture for specified user or interface name.
Note: This provider filter does not support ranges, lists or negation.
e.g.netsh trace start
provider=Microsoft-Windows-Ras-NdisWanPacketCapture
providerFilter=Yes VPN.UserName="UserXXX"
6345
Provider: Microsoft-Windows-TCPIP
TCP.AnyPort=, TCP.SourcePort=, TCP.DestinationPort=
Allows traces to be collected on ports specified by rules. Any
combination of the above filters can be applied. TCP.AnyPort will
allow traces to be collected if either the source or destination port
match.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes
TCP.SourcePort=80 TCP.DestinationPort=1234
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes TCP.AnyPort=(80,443)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes TCP.SourcePort=!(900-1000)

ProcessId=
Enables ETW traces for the described process IDs.
Note: This provider filter supports ranges, lists, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=987
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=(1,5,8,9)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=!(100-200)

IPv4.Address=
IPv4.SourceAddress=
IPv4.DestinationAddress=
Enables ETW traces for the described IPv4 address or addresses.
IPv4.Address will allow traces if either the source or destination
address match the filter. Source and destination filters can be used
simultaneously.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.Address=(2.0.0.0-3.0.0.0)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.SourceAddress=(2.0.0.0,3.0.0.0)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.DestinationAddress=!(2.0.0.0)

IPv6.Address=
IPv6.SourceAddress=
IPv6.DestinationAddress=
Enables ETW traces for the described IPv6 address or addresses.
IPv6.Address will allow traces if either the source or destination
address match the filter. Source and destination filters can be used
simultaneously.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.Address=(2001::1-2001::ffff)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.SourceAddress=(2001::1-2001::ffff)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.DestinationAddress=!(2001::ffff)

RoutingDomain=
Enables packet capture for the specified routing domain.
Use 'Get-NetCompartment' to list available routing domains.
Note: This provider filter supports lists and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes
RoutingDomain="{B1062982-2B18-4B4F-B3D5-A78DDB9CDD49}"
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes RoutingDomain="(,)"
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes RoutingDomain=!"(,)"
Provider: Microsoft-Windows-TCPIP
TCP.AnyPort=, TCP.SourcePort=, TCP.DestinationPort=
Allows traces to be collected on ports specified by rules. Any
combination of the above filters can be applied. TCP.AnyPort will
allow traces to be collected if either the source or destination port
match.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes
TCP.SourcePort=80 TCP.DestinationPort=1234
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes TCP.AnyPort=(80,443)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes TCP.SourcePort=!(900-1000)

ProcessId=
Enables ETW traces for the described process IDs.
Note: This provider filter supports ranges, lists, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=987
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=(1,5,8,9)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes ProcessId=!(100-200)

IPv4.Address=
IPv4.SourceAddress=
IPv4.DestinationAddress=
Enables ETW traces for the described IPv4 address or addresses.
IPv4.Address will allow traces if either the source or destination
address match the filter. Source and destination filters can be used
simultaneously.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.Address=(2.0.0.0-3.0.0.0)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.SourceAddress=(2.0.0.0,3.0.0.0)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv4.DestinationAddress=!(2.0.0.0)

IPv6.Address=
IPv6.SourceAddress=
IPv6.DestinationAddress=
Enables ETW traces for the described IPv6 address or addresses.
IPv6.Address will allow traces if either the source or destination
address match the filter. Source and destination filters can be used
simultaneously.
Note: These provider filters support lists, ranges, and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.Address=(2001::1-2001::ffff)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.SourceAddress=(2001::1-2001::ffff)
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes IPv6.DestinationAddress=!(2001::ffff)

RoutingDomain=
Enables packet capture for the specified routing domain.
Use 'Get-NetCompartment' to list available routing domains.
Note: This provider filter supports lists and negations.
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes
RoutingDomain="{B1062982-2B18-4B4F-B3D5-A78DDB9CDD49}"
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes RoutingDomain="(,)"
e.g.netsh trace start
provider=Microsoft-Windows-TCPIP
providerFilter=Yes RoutingDomain=!"(,)"
6346
Note:
Provider filters usage is similar to Capture filters unless
stated otherwise. Use 'netsh trace show CaptureFilterHelp'
to display the capture filters' usage
Note:
Provider filters usage is similar to Capture filters unless
stated otherwise. Use 'netsh trace show CaptureFilterHelp'
to display the capture filters' usage
6347
The following providers support provider filtering. Provider specific
help can be viewed with the following commands:

Microsoft-Windows-TCPIP
'netsh trace show providerFilterHelp Microsoft-Windows-TCPIP'

Microsoft-Windows-Ras-NdisWanPacketCapture
'netsh trace show providerFilterHelp
Microsoft-Windows-Ras-NdisWanPacketCapture'
The following providers support provider filtering. Provider specific
help can be viewed with the following commands:

Microsoft-Windows-TCPIP
'netsh trace show providerFilterHelp Microsoft-Windows-TCPIP'

Microsoft-Windows-Ras-NdisWanPacketCapture
'netsh trace show providerFilterHelp
Microsoft-Windows-Ras-NdisWanPacketCapture'
6348
Network snapshot complete.

Network snapshot complete.
6349
Starting network snapshot...

Starting network snapshot...
6401
Other adapter %1:
Other adapter %1:
6402
Ethernet adapter %1:
Ethernet adapter %1:
6403
Token Ring adapter %1:
Token Ring adapter %1:
6404
FDDI adapter %1:
FDDI adapter %1:
6405
Loopback adapter %1:
Loopback adapter %1:
6406
PPP adapter %1:
PPP adapter %1:
6407
SLIP adapter %1:
SLIP adapter %1:
6408
Tunnel adapter %1:
Tunnel adapter %1:
6409
Wireless LAN adapter %1:
Wireless LAN adapter %1:
6410
Unknown adapter %1:
Unknown adapter %1:
6701Invalid value "%2!s!" for command option "%1!s!". Invalid value "%2!s!" for command option "%1!s!".
6702Invalid value "%2!s!" for command option "%1!s!".
 Invalid value "%2!s!" for command option "%1!s!".
6703One or more parameters for the command are not correct or missing.
 One or more parameters for the command are not correct or missing.
6704File "%1!s!" already exists.
 File "%1!s!" already exists.
6705A tracing session is already in progress.
 A tracing session is already in progress.
6706Failed to start the tracing session (error=%1!d!).
 Failed to start the tracing session (error=%1!d!).
6707Circular mode requires a non-zero MaxSize parameter.
 Circular mode requires a non-zero MaxSize parameter.
6708There is no trace session currently in progress.
 There is no trace session currently in progress.
6709Failed to stop the tracing session (error=0x%1!x!).
 Failed to stop the tracing session (error=0x%1!x!).
6710'%1!s!' is not a valid or known provider.
 '%1!s!' is not a valid or known provider.
6711Overwrite=yes is not allowed with Append mode.
 Overwrite=yes is not allowed with Append mode.
6712The inbox capture driver could not be started (error=0x%1!x!).
 The inbox capture driver could not be started (error=0x%1!x!).
6714The '%1!s!' application has locked the Network Configuration database.
Please close that application and try again.
 The '%1!s!' application has locked the Network Configuration database.
Please close that application and try again.
6715'%1!s!' is not a valid scenario.
 '%1!s!' is not a valid scenario.
6716The scenario '%1!s!' could not be added to the tracing session (error=0x%2!x!).
 The scenario '%1!s!' could not be added to the tracing session (error=0x%2!x!).
6717Packet Capture providers could not be added to the tracing session (error=0x%1!x!).
 Packet Capture providers could not be added to the tracing session (error=0x%1!x!).
6718The required correlation provider (%1!s!) could not be added to the tracing session (error=0x%2!x!).
 The required correlation provider (%1!s!) could not be added to the tracing session (error=0x%2!x!).
6719The specified keywords are not valid for the provider '%1!s!'.
 The specified keywords are not valid for the provider '%1!s!'.
6720The specified level is not valid for the provider '%1!s!'.
 The specified level is not valid for the provider '%1!s!'.
6721The specified file '%1!s!' does not exist.
 The specified file '%1!s!' does not exist.
6722Conversion failed (error=0x%1!x!).
 Conversion failed (error=0x%1!x!).
6723'%1!s!' is not a valid operator.
 '%1!s!' is not a valid operator.
6724'%1!s!' is not a valid range.
 '%1!s!' is not a valid range.
6725%1!s! is not a valid interface.
 %1!s! is not a valid interface.
6726'%1!s!' is not a valid type.
 '%1!s!' is not a valid type.
6727Capture filters are only allowed when capture is enabled.
 Capture filters are only allowed when capture is enabled.
6728See 'trace %1!s! help' for detailed help.
 See 'trace %1!s! help' for detailed help.
6729'%1!s!' is a required parameter.
 '%1!s!' is a required parameter.
6730Network Diagnostics failed (error=0x%1!x!).
 Network Diagnostics failed (error=0x%1!x!).
6731The registry entry for '%1!s!' is not valid (error=0x%2!x!).
 The registry entry for '%1!s!' is not valid (error=0x%2!x!).
6732Report=yes is not allowed when SaveSessionTrace=no is specified.
 Report=yes is not allowed when SaveSessionTrace=no is specified.
6733'%1!ws!' is not a valid helper class or may not be correctly
installed.
 '%1!ws!' is not a valid helper class or may not be correctly
installed.
6734

6735Correlation failed (error=0x%1!x!).
 Correlation failed (error=0x%1!x!).
6736
Activity "%1!s!" was not found.
Activity "%1!s!" was not found.
6737Invalid value "%2!s!" for command option "%1!s!" - Must be a GUID.
 Invalid value "%2!s!" for command option "%1!s!" - Must be a GUID.
6738The specified path '%1!s!' does not exist.
 The specified path '%1!s!' does not exist.
6739The CaptureType switch is only allowed when capture is enabled.
 The CaptureType switch is only allowed when capture is enabled.
6740This CaptureType is not applicable to this system's architecture.
 This CaptureType is not applicable to this system's architecture.
6741Virtual Switch capture can be enabled only after installing the Hyper-V role.
 Virtual Switch capture can be enabled only after installing the Hyper-V role.
6742Trace merge failed (error=0x%1!x!).
 Trace merge failed (error=0x%1!x!).
6743%1!s! is not a valid routing domain.
 %1!s! is not a valid routing domain.
6801Warning: The inbox capture driver could not be stopped (error=0x%1!x!).
 Warning: The inbox capture driver could not be stopped (error=0x%1!x!).
6802Warning: Session information could not be saved (error=0x%1!x!).
 Warning: Session information could not be saved (error=0x%1!x!).
6803Warning: Report generation failed (error=0x%1!x!).
 Warning: Report generation failed (error=0x%1!x!).
6804Warning: An instance of the 'NT Kernel Logger' is already running.
System information will not be added to the trace file.
 Warning: An instance of the 'NT Kernel Logger' is already running.
System information will not be added to the trace file.
6805Warning: System information could not be added to the trace file (error=0x%1!x!).
 Warning: System information could not be added to the trace file (error=0x%1!x!).
6806Warning: Helper class attributes could not be retrieved (error=0x%1!08X!).
 Warning: Helper class attributes could not be retrieved (error=0x%1!08X!).
6807Warning: The NDF trace file is not available.
 Warning: The NDF trace file is not available.
6808Warning: Some events were not captured due to high volume of events.
Please consider using filters to reduce the volume
 Warning: Some events were not captured due to high volume of events.
Please consider using filters to reduce the volume
6809Warning: Report generation is not supported in safe mode.
 Warning: Report generation is not supported in safe mode.
6810Warning: Packet capture is not supported in safe mode.
 Warning: Packet capture is not supported in safe mode.
6901Off Off
6902On On
6903%systemroot%\pla\Reports\Report.System.NetTrace.xml %systemroot%\pla\Reports\Report.System.NetTrace.xml
6904%systemroot%\pla\Rules\Rules.System.NetTrace.xml %systemroot%\pla\Rules\Rules.System.NetTrace.xml
6905Yes Yes
6906No No
6907%systemroot%\system32\NetTrace.PLA.Diagnostics.xml %systemroot%\system32\NetTrace.PLA.Diagnostics.xml
6908Network Diagnostics Network Diagnostics
6909This data collector set collects network related data on your local system. The data to be collected includes network component traces, registry keys, system hardware information that can help troubleshoot network related problems. This data collector set collects network related data on your local system. The data to be collected includes network component traces, registry keys, system hardware information that can help troubleshoot network related problems.
6910Microsoft Windows Network Trace Microsoft Windows Network Trace
6911Microsoft Microsoft
6912Network information collector Network information collector
6913Disabled Disabled
0x30000001Start Start
0x30000002Stop Stop
0x30000009Send Send
0x50000001Critical Critical
0x50000002Error Error
0x50000003Warning Warning
0x50000004Information Information
0x50000005Verbose Verbose
0x90000001Microsoft-Windows-Networking-Correlation Microsoft-Windows-Networking-Correlation
0x90000002Microsoft-Windows-Networking-Correlation/Diagnostic Microsoft-Windows-Networking-Correlation/Diagnostic
0xB0000BB9Dummy event for standard level enumeration Dummy event for standard level enumeration
0xB000EA61Source Provider: %1 Context: %2 Source Provider: %1 Context: %2

EXIF

File Name:nettrace.dll.mui
Directory:%WINDIR%\WinSxS\amd64_microsoft-windows-n..sh-helper.resources_31bf3856ad364e35_10.0.15063.0_en-us_f94b4d98253d6753\
File Size:56 kB
File Permissions:rw-rw-rw-
File Type:Win32 DLL
File Type Extension:dll
MIME Type:application/octet-stream
Machine Type:Intel 386 or later, and compatibles
Time Stamp:0000:00:00 00:00:00
PE Type:PE32
Linker Version:14.10
Code Size:0
Initialized Data Size:57344
Uninitialized Data Size:0
Entry Point:0x0000
OS Version:10.0
Image Version:10.0
Subsystem Version:6.0
Subsystem:Windows GUI
File Version Number:10.0.15063.0
Product Version Number:10.0.15063.0
File Flags Mask:0x003f
File Flags:(none)
File OS:Windows NT 32-bit
Object File Type:Dynamic link library
File Subtype:0
Language Code:English (U.S.)
Character Set:Unicode
Company Name:Microsoft Corporation
File Description:Network Trace Helper
File Version:10.0.15063.0 (WinBuild.160101.0800)
Internal Name:nettrace.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original File Name:nettrace.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0

What is nettrace.dll.mui?

nettrace.dll.mui is Multilingual User Interface resource file that contain English (U.S.) language for file nettrace.dll (Network Trace Helper).

File version info

File Description:Network Trace Helper
File Version:10.0.15063.0 (WinBuild.160101.0800)
Company Name:Microsoft Corporation
Internal Name:nettrace.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original Filename:nettrace.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Translation:0x409, 1200