NirSoft has updated TCPLogView 1.15 and TCPLogView (64-bit) 1.15 to automatically log TCP connections as they're opened and closed on Windows 2000-8.
Details recorded include the event type (Open, Close, Listen), time, local and remote addresses, local and remote ports, and the initiating process name and ID.
To enable the new logging feature, click Options > Write To Log File. TCPLogView then saves anything it detects to a CSV file in its own folder.
One potential problem is that TCPLogView isn't intercepting or hooking connection attempts, but repeatedly creating snapshots of open connections and comparing them to the last one. As a result, anything opened very briefly might not be recorded.
On the plus side, the program is easy to use, portable, doesn't have any dependencies, and is tiny even by NirSoft’s standards (the largest of the two downloads is a mere 89KB, and that gets you a Readme.txt and CHM-based help file, as well as the application itself).
Our view: it was a great little tool before, and now it's even better. TCPLogView 1.15 and TCPLogView (64-bit) 1.15 are available now.