Windows sysinternals

Chapter 13 Network and Communication Utilities 375
If any Include or Exclude filter rules are in effect when you exit Portmon, Portmon will display
them in a dialog box the next time you start it. Simply click OK to continue using those rules,
or change them first. You can edit them in place, or click Reset to remove the filter.
Saving, Logging, and Printing
You can select one or more rows from the Portmon list and copy them as tab-delimited text
to the Windows clipboard by pressing Ctrl+C. Note that the Time column is always included
even if the Show Time Column option is deselected, while the sequence number column is
not included. Portmon supports standard Windows methods of selecting multiple rows such
as holding down Shift while pressing the Up or Down arrow keys to select consecutive rows,
or holding down Ctrl while clicking nonconsecutive rows.
You can save the data captured by Portmon as a text file by choosing Save or Save As from
the File menu. Portmon uses the .LOG extension by default. The file format is tab-delimited
ASCII text and always includes the sequence number and Time columns.
To have Portmon log output to a file as it displays it, choose Log To File from the File menu.
The first time you choose that menu item or click the Log To File button on the toolbar,
Portmon displays the Log-To-File Settings dialog box shown in Figure 13-6, prompting you
for a file location. From that point forward, the Log To File menu option and toolbar button
toggle logging to that file on or off. To log to a different file or to change other log file settings,
choose Log To File As from the File menu. (If log-to-file is currently enabled, choosing
Log To File As has the same effect as toggling Log To File off.) The Settings dialog box also
lets you configure a maximum size beyond which the log file will not grow, and whether to
overwrite or append to an existing log file. After the log file grows beyond the max log size,
Portmon disables logging to the file but continues to display new events as they come in. A
max log size of 0 indicates no limit.
FIGURE 13-6 The Portmon Log-To-File Settings dialog box.
When logging to a file, Portmon writes two lines of output with the same sequence number
for each event. The first line of each pair includes the process, request, port, and other information
supplied by the process with the request. The second line includes the event duration
(if the Clock Time option is not selected) and the result. Note that related lines may not be
www.it-ebooks.info