Deploy, manage, and maintain servers - Administering Windows Server 2012 R2 - page 35

■ Normal Uses pull delivery mode and batches 5 items at a time with a timeout of
15 minutes
■ Minimize Bandwidth Uses push delivery with a batch timeout of six hours and a
heartbeat interval of six hours
■ Minimize Latency

Uses push delivery mode with a batch timeout of 30 seconds

Coniguring network monitoring
Windows Server 2012 R2 provides a new module of Windows PowerShell cmdlets to enable
network packet capturing. The NetEventPacketCapture module includes the cmdlets shown in
Table 1-3.

TABLE 1-3 NetEventPacketCapture cmdlets

Cmdlet Description

Add-NetEventNetworkAdapter Adds a network adapter as a filter on a remote packet capture

provider.

Get-NetEventNetworkAdapter Returns the network adapters associated with a remote packet

capture.

Remove-NetEventNetworkAdapter Removes a network adapter associated with a remote packet

capture.

Add-NetEventPacketCaptureProvider Adds a new remote packet capture provider. Only one remote

packet capture provider can be active at a time.

Get-NetEventPacketCaptureProvider Displays a remote capture provider.

Remove-
NetEventPacketCaptureProvider

Removes a remote packet capture provider, allowing you to add
a new one.

Set-NetEventPacketCaptureProvider Alters the configuration of a remote packet capture provider.

Add-NetEventProvider Adds an ETW provider to a session.

Get-NetEventProvider Returns the ETW providers that are present on the computer, or

those associated with an event or packet capture session.

Remove-NetEventProvider Removes an ETW provider from a session.

Set-NetEventProvider Modifies the configuration of an ETW provider.

Get-NetEventSession Returns an object describing the network event sessions.

New-NetEventSession Creates a new network event session.

Remove-NetEventSession Removes an existing network event session.

Set-NetEventSession Modifies the configuration of a network event session.

Start-NetEventSession Starts the event and packet capture for a network event session.

Stop-NetEventSession Stops the event and packet capture for a network event session.