Our separate monitoring laptop sometimes stops refreshing after I enable detailed inspection logging. File activity is high during the pauses; cell controls are separate. Which timing comparison would distinguish synchronous writes from delayed communication without assuming the folder activity explains everything?