How to install Netmon and USB ETW Parsers

This article provides installation information about Netmon and the USB ETW parsers.

Install Netmon from the Microsoft Download Center, and then install USB ETW parsers from Windows Driver Kit (WDK). The USB ETW parsers are supported in Netmon Version 3.3 and later versions.

To install the Netmon tool and the Netmon USB parser

  1. Determine whether your machine is running 32-bit Windows or 64-bit Windows:

    1. Open the Start menu, right-click Computer, and view Properties.
    2. Look at the System type field.

    If your system type is 32-bit Operating System, you'll use the x86 download. If your system type is 64-bit Operating System and your processor is Itanium, you'll use the ia64 download. For other processor types, use the x64 or AMD64 download.

  2. Install Netmon:

    1. Navigate to the Windows Network Monitor page in the Microsoft Download Center.
    2. Select the Download button.
    3. Choose one or more appropriate .exe files for your system in the download pop-up window and select the Download button.
    4. After the download completes, run the .exe file to start the Setup Wizard.
    5. Select Typical when you're asked to choose the setup type.
  3. Install the WDK from Windows Driver Kit (WDK)).

  4. Allow execution of PowerShell scripts:

    1. On the Start screen, type powershell, right-click on the Windows PowerShell result, and select Run as administrator.

    2. In the PowerShell window, type this command:

      Set-ExecutionPolicy RemoteSigned -Force
      
    3. Close the PowerShell window.

    4. Open a PowerShell window (you don't need to Run as administrator) and run the following commands. Adjust the path if you installed the kit to a different location:

      cd "C:\Program Files (x86)\Windows Kits\10\Tools\10.0.22621.0\x86\Network Monitor Parsers\usb"
      ..\NplAutoProfile.ps1
      
    5. Restart Netmon to apply the changes.

  5. Verify that the profile is active in Netmon.

    1. On the Tools menu, select Options.

    2. On the Parser Profiles tab, make sure that AutoProfile (generated) is set as active. Your settings should be similar to this image.

      Screenshot of the Parser Profiles tab, with AutoProfile set as active.

    3. Select OK.

Netmon is now configured for use with a USB ETW trace file. For more information, see How to view a USB ETW trace in Netmon.