Syntax pattern from Microsoft Learn; replace placeholders and choose only one documented alternative before use.
netsh wfp [capture | dump | help | set | show | ?]netsh wfp command
The `netsh wfp` command is used to manage and troubleshoot the Windows Filtering Platform (WFP). This guide lists the documented syntax and parameters for netsh wfp; check Microsoft Learn for version, role and execution-context requirements.
Documented syntax
netsh wfp [capture | dump | help | set | show | ?]
netsh wfp capture start cab=<on|off> traceonly=<on|off> keywords=<none|bcast|mcast|bcast+mcast> file=<path>
netsh wfp capture status
netsh wfp capture stop
netsh wfp dump
netsh wfp set options netevents=<on|off> keywords=<none|bcast|mcast|bcast+mcast> txnwatchdog=<milliseconds>
netsh wfp show appid file=<path>The linked Microsoft Learn article is the upstream authority. Availability may depend on Windows release, role, optional feature or interactive tool context.
Syntax pattern
Parameters, options and clauses
| Option / clause | Description |
|---|---|
<path> | Microsoft documents this argument or subcommand; check the linked reference for its required format and context. |
<milliseconds> | Microsoft documents this argument or subcommand; check the linked reference for its required format and context. |
Review a command and its target before running it. Commands that alter files, services, accounts, disks, permissions or databases may be difficult to reverse. Test in a safe environment and keep backups.