If you use the PortReporter ( download , KB article ), there is a nice log parser for it. Go ahead and snatch a copy of Port Reporter Parser while it's hot. Here's straight from the horse's mouth a short list of what the tool is capable of: The Port Reporter