Using wireshark would be excellent from my perspective but  I don't know if people who might have written tools against the output of Portmon would work with a PCAP capture.

Marco / Pavel:  Any thoughts here?

--David
KI6ZHD