I checked that the captured data before saving in the portmon look the same (i.e.. saved and unsaved log files are seem to be equivalent).
In portmon there is opportunity to switch between ASCII and HEX. But both options give pretty much the same result
regards, Alex
