wfpdiag.etl. What is that?

[Carl]

wfpdiag.etl is doing regular reads (about every second)of my system
(C:\) drive. What is it? Is it dangerous? Why the constant drive activity?

Thanks

Carl

 

[Kerry Brown]

wfpdiag.etl is doing regular reads (about every second)of my system (C:\)
drive. What is it? Is it dangerous? Why the constant drive activity?

Thanks

Carl

I'm not sure what the file is. I have it on my computer. If you open it in
notepad it appears to be something to do with time zones and IPSec. Use this
tool

http://www.microsoft.com/technet/sysinternals/FileAndDisk/Filemon.mspx

to get information on what process is using the file.

 

[David Beder [MSFT]]

This is a trace file created by Windows to collect diagnostics information
around ipsec and firewall activity. Such info could be later read by a
troubleshooting tool to help diagnose connectivity failures. I would not
expect it to be active unless you are receiving (or maybe sending) traffic
which is being blocked by your security software.

Is the file growing over time? How large is it getting?

 

[Carl]

David-thanks for your input. You pointed me at Vista's firewall and that
enabled me to locate the program that was causing so much disk activity
involving wfpdiag.etl.

I had installed a program from Shinx Software called Vista Firewall
Control that allows management of the firewall via a simple GUI. It
installs as a system service. Once I disabled the service and rebooted,
the disk activity ceased.

Thanks again for your help.

 

[Rock]

David-thanks for your input. You pointed me at Vista's firewall and that
enabled me to locate the program that was causing so much disk activity
involving wfpdiag.etl.

I had installed a program from Shinx Software called Vista Firewall
Control that allows management of the firewall via a simple GUI. It
installs as a system service. Once I disabled the service and rebooted,
the disk activity ceased.

Ahh, now that you mention it, I thought I had seen that file being accessed
at some point on this system but just couldn't remember the specifics since
it was happened some time ago. But yes I had installed Vista Firewall
Control some time ago, and the reason I removed it was this constant file
access.

Glad it's sorted now.