Bruce Atkinson

FileMon is a utility by Sysinternals. It is simple and easy to use and may help get you out of bind when you don’t know why you are getting an error message. It is amazing how many different problems this utility will help solve. You can read more about Sysinternals utilities here.

Last fall I used FileMon to help us solve a perplexing problem. We had an important piece of software that wasn’t performing well, so they upgraded the workstations that it was running on. Even though the workstations were now more than powerful enough, they would still pause and miss collecting some of the important data that they were collecting. The vendor wasn’t any help, and the users were losing faith in the software.

I figured I would just sit down and monitor the software using Regmon and Filemon. As I watched the application it became obvious to me that it was looking for a file called none.wav. One of the things that happens when you look for a file that doesn’t exist, is that each folder in the path is searched. If you have large folders, or folders on a network drive, and folders on a network drive that is on a server on the WAN somewhere, that search can take a while. It might even cause the system to hang a little while the search is going on.

The application had the ability to play sounds to alert you when an event occurs. If you didn’t want to hear a sound that event was set to “none”. This caused the application to constantly search for the file none.wav. The vendor was unaware of this.

Creating a short silent file called none.wav and putting it in the application folder, stopped the constant searching and cleared up the problems we were having. A problem that had been researched for a long time without coming up with a solution was solved in a few minutes with Filemon.

Filemon
Regmon (like Filemon but for the Registry)
Process Monitor(FileMon and RegMon combined)