Event Viewer

I am having some issues with event viewer. it appears that "Event viewer" will only log events if there is an issue...or if symantec sends a log.

B4 i go through the grueling process of using a good packet sniffing program, i am hoping that event viewer will be of use (though it seems to be failing).

I am in need of a program that can give me the start and end times of any/all programs and processes (including stealth ones)

-----

The situation i am in / why i NEED an event viewer:

i have 3 pc's on my network. PC A, B, C.....PC A: is getting networks attacks from both PC B and PC C. "Port scan attack detected" is what symantac says is happening. Even with all programs off on PC B and C (i just boot the PC's and leave them idle) pc A still gets network attacks. B4 i try to learn how to use a program (cain and abel, wireshark, etc....very complicated programs to me) i was hoping someone here knows a SIMPLE user friendly event viewer that will log all stealth events. Symantec gives me the exact time (down to the second) of the attack in the symantec event logs....just need an event viewer to tell me which program is running at the times of the attack. that way i can manually cross reference them to see what is the source of my issue.