

With Winshark and the power of Windows, we can now capture Network and Event Logs in the same tool.

We've added Tracelogging support to cover almost all log techniques on the Windows Operating System. Winshark is based on a libpcap backend to capture ETW (Event tracing for Windows), and a generator that will produce all dissectors for known ETW providers on your machine. The best tool for Windows would be one that can gather and mix all types of logs. Wireshark has built a huge library of network protocol dissectors. Microsoft Message Analyzer is being retired and its download packages were removed from sites on November 25, 2019. P.S : WinPCap is apparently going to come out with a new version soon that is compatible with Windows 7.Wireshark plugin to work with Event Tracing for Windows This will allow all users on the machine to use Wireshark without admin privileges.

Essentially, Windows was blocking the install of WinPcap (network capture driver). As part of installing my standard set of tools, I tried to install Wireshark (open source network capture tool), and ran into an error due to the UAC security settings. I recently upgraded my laptop to Windows 7 RC from the beta version I was testing earlier. Looks like the issue was with the drivers not being signed digitally. This release includes WinPcap 4.1.1, which has support for Windows. Wireshark works without any issues as of version 1.2.3.
