Home / server / Questions / 536964
Accepted
JJJJNR
Asked: 2013-09-07 06:13:00 +0800 CST

Network monitor 3.4 issue

  • 772

I am getting the following error message when I try to run network monitor on a windows 2003 DNS server I am trying to decommission. 

C:\>Nmcap.exe /network * /capture KerberosV5 || TCP.port==389 || UDP.port==389 file c:\temp\capture.chn:200mb
'Nmcap.exe' is not recognized as an internal or external command,
operable program or batch file.
'TCP.port' is not recognized as an internal or external command,
operable program or batch file.
'UDP.port' is not recognized as an internal or external command,
operable program or batch file.
windows-server-2003

1 Answers

  1. Best Answer

    You can't just throw pipe characters (|) onto the command line without escaping them or surrounding them with quotes ("). Pipe characters have special meaning to the command interpreter. Furthermore, make sure that Nmcap.exe is either in your current working directory (e.g. C:\) or in your path environment variable. The binary is most likely in C:\Program Files\Microsoft Network Monitor 3\ on your computer.

    Something like this:

    C:\>Nmcap.exe /network * /capture "KerberosV5 || TCP.port==389 || UDP.port==389" /file c:\temp\capture.chn

    Read the help for Nmcap.exe: Nmcap.exe /?

    • 2