Logging the denied packets
In the Active Capture Mode, TMeter can block the
captured packets if the matching rule has "Deny" action. All denied
packets are recorded into the plaintext file in the user-defined
folder (by default, %programfiles%\TMeter\Logs). The filename for
the denied packets is constructed from the current date using the
template "DeniedPkt_yyyy_mm.txt" (where yyyy is a four-digit year
and mm is a two-digit month of the year ranging from 01 to 12).
You can specify the folder for the denied packets log in the "Options" dialog box (the "Folder" tab) in TMeter Administrative Console.
You may setup different levels of logging the denied packets (silent, normal and extended). See details.