Intro If you need to capture network traffic from a Windows server, you may find that that standards or controls in your organisation prevent or forbid you from installing tools such as Wireshark on your Windows servers.
This may be enforced by AppLocker or other controls.
However, if you do have Administrator access on the server you can still capture the traffic and also convert to a format you can load into Wireshark on a desktop machine (or analyse using tcpdump or other tools on a Linux system) - there is no requirement to install Wireshark on the server - you can use built-in tools to achieve this.
