pcap format is also the format used by tcpdump and various other tools tcpdump, when using newer verions of the libpcap library, can also read some pcapng files, and, on newer versions of macOS, can read all pcapng files and can write them as well. Wireshark's native capture file formats are pcapng format and pcap format it can read and write both formats.

It lets you interactively browse packet data from a live network or from a previously saved capture file. Wireshark is a GUI network protocol analyzer. Provide the collected capture to Acronis Support.Interactively dump and analyze network traffic Synopsis This doesn't affect the capture file in any way.Ħ. On a failed backup the post-backup command will not start which means you will need to kill the wireshark.exe manually. On a successful backup the pre-backup command will end with a failure, this is expected because we forcefully kill the process. Uncheck all Fail the backup if command execution fails and Don't start optionsĥ.

taskkill /im 'wireshark.exe' /F is to make sure the wireshark process is killed after the backup succeeds - to avoid spawning multiple unneeded processes.Ĥ.

specify the target file name for capture in '-w' parameter, e.g.

Specify a duration at which the backup usually fails in seconds (60 for 1 minute, 900 for 15 minutes and so on - the larger the value, the larger the log).

' -a duration:60' is to ensure the capture stops after 60 seconds and doesn't continue in case the backup runs for longer.

name of the interface for the ' -i' parameter can be defined through ' wireshark -D' command or by running Wireshark and noting the interface name in the GUI.

Make sure to adjust the working folder to the one noted at step 2.

Create a pre-backup and post-backup commands as specified on the attached screenshot.

Note the installation folder with the executable, e.g.

Download the free Wireshark utility from and install Wireshark on the device.

in case scheduled backup to Acronis Cloud fails.įor general instructions on using Wireshark see Collecting PCAP Logs with Wireshark Solution

This article describes how to capture Wireshark logs on scheduled backups in Windows, e.g.

Wireshark commands