logparser - reading pfirewall.log

logparser -i:W3C 'select date, time, dst-ip, reversedns(dst-ip) from C:\Windows\pfirewall.log where protocol='TCP' and dst-port=80'

This is the same query but instead of returning the results to the console window it will put the results in a CSV file called pfirewall.csv in your working directory:

logparser -i:W3C -o:CSV 'select date, time, dst-ip, reversedns(dst-ip) from C:\Windows\pfirewall.log to pfirewall.csv where protocol='TCP' and dst-port=80'

Techlog