Windows Vista Beta | WinVistaBeta.com - Message | Featre enhancement fpr Process Explorer/Filemon

January 06, 2009  
Subject: Featre enhancement fpr Process Explorer/Filemon
Group: microsoft.public.winternals
Date: 5/5/2007 3:44:29 PM
From: "Frank Carius [MVP]" [Email Address Protection]

Hello Marc, or who ever reads that.

Process Explorer and filemon are both valuable tools for detecting program
problems. (access denied etc)
I can also configure a "filter" to exclude cvertain processes etc. but it
would be greate to have an alternate view to seethe number of file/IOs
MBytes per Program/process.

currently Filemon produces a list /scrolling or not) but think about a list,
sorted by process names and "collapsed" view with a summaryLine.

I personally have the problem, that the notebook harddisk is sometimes doing
something and i do not really know the process.
So i start filemon and see a lot of accesses.
My wish is to have some "numbers" per Process to find out its activity.
btw i know that Vista has such things build in. but XP an Windows 2003 has
not

I hope you can understand my english :-)


Frank Carius


Back
Subject: Re: Featre enhancement fpr Process Explorer/Filemon
Group: microsoft.public.winternals
Date: 5/5/2007 5:42:14 PM
From: "dean-dean" [Email Address Protection]

> I personally have the problem, that the notebook harddisk is sometimes
> doing something and i do not really know the process.

Try using Process Monitor, with View > Show Processes from All Users.
Usually, the more active svchost.exe, CPU-wise, is where your notebook "is
doing something'. Hovering your mouse over a particular svchost.exe will
show the Services it's in charge of, with a tooltip. If you right-click the
svchost.exe, and choose Properties, on the Threads tab, it will show the
files in play, again with a CPU column. Selecting the more active thread,
and then clicking on the Module button, will allow you to figure out the
Service that is associated with the selected file (usually by looking at the
Details tab of that file's Properties).



"Frank Carius [MVP]" <frank@carius.de.spamstop> wrote in message
news:%23vCjyb2jHHA.4904@TK2MSFTNGP05.phx.gbl...
> Hello Marc, or who ever reads that.
>
> Process Explorer and filemon are both valuable tools for detecting program
> problems. (access denied etc)
> I can also configure a "filter" to exclude cvertain processes etc. but it
> would be greate to have an alternate view to seethe number of file/IOs
> MBytes per Program/process.
>
> currently Filemon produces a list /scrolling or not) but think about a
> list, sorted by process names and "collapsed" view with a summaryLine.
>
> I personally have the problem, that the notebook harddisk is sometimes
> doing something and i do not really know the process.
> So i start filemon and see a lot of accesses.
> My wish is to have some "numbers" per Process to find out its activity.
> btw i know that Vista has such things build in. but XP an Windows 2003 has
> not
>
> I hope you can understand my english :-)
>
>
> Frank Carius


Back