While the above description states that no log file will be created, this is not true, as in our tests, a PktMon.etl file was also created when using the real-time logging mode. To test this ...

Spoiler alert, it’s the latter. The tool in question is called tail. With tail, you can view a Linux log file as the system writes to it in real time.