As a result I changed ProcMon to *drop* filtered events (using the Drop Filtered Events option from the Filter menu), i.e. Given that ProcMon can capture hundreds, if not thousands, of events per minute it is important that you don’t run out of virtual memory. IMPORTANT: ProcMon saves events by default to your device’s virtual memory, i.e. (where a is Start/Stop Capture, b is File Activity only and c is the specific filter.) So, I set a specific filter for a filepath beginning C:\Temp\aria-debug and just left ProcMon to it for 24 hours. I could find no mention in any event log so fired up Process Monitor ( ProcMon) at 19:20 and set it to filter File Activity events for 10 minutes… but to no avail.
I too noticed aria-debug-xxxx.log files in my TEMP environment folder for the last 7 days, many with a file creation time of 19:24. Another topic prompted a query (since removed) by about aria-debug-xxx.log files appearing in whatever folder was designated by Windows’ TEMP environment variable.
0 kommentar(er)
