Start a Network Trace

Netsh trace start scenario=netconnection capture=yes persistent=yes overwrite=yes maxsize=2048 tracefile=D:\Logs\%computername%.etl

Verify Traces is running

netsh trace show status

Stop Capture

netsh trace stop

https://www.microsoft.com/en-us/download/details.aspx?id=44226

https://docs.microsoft.com/en-us/message-analyzer/microsoft-message-analyzer-operating-guide