Filemon 7.03
Filemon will monitor and display file system activity on a system in real-time.
|
Filemon will monitor and display file system activity on a system in real-time. Its advanced capabilities make it a powerful tool for exploring the way Windows works, seeing how applications use the files and DLLs, or tracking down problems in system or application file configurations.
Filemon`s timestamping feature will show you precisely when every open, read, write or delete, happens, and its status column tells you the outcome.
Filemon is so easy to use that you`ll be an expert within minutes. It begins monitoring when you start it, and its output window can be saved to a file for off-line viewing. It has full search capability, and if you find that you`re getting information overload, simply set up one or more filters.
Filemon works on NT 4.0, Windows 2, Windows XP, Windows XP 64-bit Edition, Windows 95, Windows 98 and Windows ME. Sysinternals also has a version of Filemon for Linux.
Installation and Use Simply run FileMon (filemon.exe). You must have administrator privilege to run FileMon. When FileMon is started for the first time it will monitor all local hard drives. Menus, hot-keys, or toolbar buttons can be used to clear the window, select and deselect monitored volumes including network volumes (Windows NT/2K/XP), save the monitored data to a file, and to filter and search output.
If you've specified filters then FileMon will ask you to confirm filters used from the last session each time you start it. To start FileMon without it prompting you specify the /q switch on the command line. When FileMon starts it automatically captures file system activity. To start it with capture disabled use the /o switch on the command-line.
As events are printed to the output, they are tagged with a sequence number. If Filemon’s internal buffers are overflowed during extremely heavy activity, this will be reflected with gaps in the sequence number.
Each time you exit FileMon it remembers the filters you've configured, position of the window and the widths of the output columns.
Filtering Use the Filter dialog, which is accessed with a toolbar button or the Edit|Filter/Highlight menu selection, to select what data will be shown in the list view. The '*' wildcard matches arbitrary strings, and the filters are case-insensitive. Only matches shown in the include filter, but that are not excluded with the exclude filter, are displayed. Use ';' to separate multiple strings in a filter (e.g. "filemon;temp"). Windows NT/2 note: because of the asynchronous nature of file I/O, its not possible to filter on the result field.
Wildcards allow for complex pattern matching, making it possible to match specific file accesses by specific applications, for example. The include filter “Winword*Windows” would have FileMon only show accesses by Microsoft Word to files and directories that include the word “Windows”.
Use the highlight filter specify output that you want to have highlighted in the listview output. Select highlighting colors with Edit|Highlight Colors.
Additional filter options select or deselect read, write or open operations. In many troubleshooting scenarios only open operations are of interest, for example.
tags use the sequence number the output command line the command the filters the include open operations for example include filter time you and the the window
Download Filemon 7.03
Authors software
TCPView 2.4
Sysinternals
TCPView is a little application that displays full details of all TCP and UDP endpoints on your system, including the remote address and state of TCP connections.
Regmon 7.04
Sysinternals
Regmon is a Registry monitoring tool that will show you which applications are accessing your Registry, which keys they are accessing, and the Registry data that they are reading and writing - all in real-time.
Filemon 7.03
Sysinternals
Filemon will monitor and display file system activity on a system in real-time.
Process Explorer 10.21
Sysinternals
Process Explorer will show you information about which handles and DLLs processes have opened or loaded.
BGInfo 4.07
Sysinternals
BGInfo automatically generates desktop backgrounds that include important information about the system including IP addresses, computer name, network adapters, and more.
Similar software
Filemon 7.03
Sysinternals
Filemon will monitor and display file system activity on a system in real-time.
Regmon 7.04
Sysinternals
Regmon is a Registry monitoring tool that will show you which applications are accessing your Registry, which keys they are accessing, and the Registry data that they are reading and writing - all in real-time.
TDIMon 1.01
Mark Russinovich
TDIMon is a program which allows you to monitor TCP and UDP activity on your local system.
Microsoft Process Monitor 1.12
Microsoft Inc
Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.
Portmon 3.02
Mark Russinovich
Portmon is an application which monitors and displays all serial and parallel port activity on a system.
Tokenmon 1.01
Mark Russinovich
Tokenmon is a tool which monitors and displays a variety of security-related activity taking place on a system.
DebugView 4.64
Mark Russinovich
DebugView is a program which helps you monitor debug output on your local system, or any computer on the network that you can reach via TCP/IP.
Filter Driver Load Order 1.0.005
busTRACE Technologies
busTRACE Technologies has developed a simple utility that allows you to view which filter drivers are specified for the Disk and CD/DVD devices on your computer.
Log Dispatcher 3.6.7
Morning Glory Technologies
Log Dispatcher allows you to watch updates to multiple files or logs as they occur in real time.
Image Filter Tester 1.1
swiftgear.com
Image Filter Tester is an image processing application that applies any number of layers of user-defined filters to an image and immediately shows the result.
Other software in this category
File Analyzer 1.6 12.10.2002
Vadim Tarasov
File Analyzer is a software application that can identify the format of a file, with what it was compiled, encrypted, packed, etc.
Snap 1.1
Fritz
This program is a multiplatform (9x,ME,NT4) Task/Window manager and MORE.
FileType v1.26
X-Fixer
FileType is intended to give the "first-look" file type information without any futher details.
CodeSnip 1.0
Dacris Software
CodeSnip helps you to increase your daily coding efficiency.
ExamDiff 1.6m
PrestoSoft
ExamDiff is a useful utility for visual file comparison.