$filterUDP = ''
$filterTCP = ''
ps | where ProcessName -eq 'chrome' | %{
Get-NetUDPEndpoint | where OwningProcess -EQ $_.Id | select LocalPort | % {
$filterUDP = $filterUDP+'(udp.port == '+$_.LocalPort+') or'
}
Get-NetTCPConnection | where OwningProcess -EQ $_.Id | select LocalPort | % {
$filterTCP = $filterTCP+'(tcp.port == '+$_.LocalPort+') or'
}
}
$filterUDP = $filterUDP.substring(0, $filterUDP.Length-3)
$filterTCP = $filterTCP.substring(0, $filterTCP.Length-3)
$filter = $filterUDP+' or '+$filterTCP
net use \\192.168.104.129\Prueba-share-samba /user:root 1234
.\tshark.exe -i 'ethernet 2' -Y $filter > \\192.168.104.129\Prueba-share-samba\test.txt