The default location of the Windows XP SP2 Windows Firewall log file is %SystemRoot%\pfirewall.log.
If you wish to relocate the pfirewall.log file:
01. Open Control Panel.
02. Press Windows Firewall.
03. Select the Advanced tab.
04. Under Security Logging, press Settings.
05. Check the Log dropped packets and the Log successful connections boxes.
06. Type the new fully qualified log file path into the Name box.
07. Press Save As.
08. Enter the File name, like HideFirewallLog.log.
09. Press Save.
10. Press OK, OK, and OK.
NOTE: To disable Security Logging, uncheck the Log dropped packets and the Log successful connections boxes.