Comment Feed for Channel 9 - Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor http://media.ch9.ms/ch9/26e7/9f39d624-f9aa-434b-a1da-41545a5a26e7/DefragTools11_220.jpg Channel 9 - Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor In this 3 part episode of Defrag Tools, Andrew Richards and Larry Larsen walk you through Sysinternals ProcDump. ProcDump allows you to capture the memory of a process running on the computer. The dump file can be of varying size and can be taken with varying outage durations. Dumps can be triggered immediately or can be triggered by a variety of events including CPU utilization, Memory utilization, a Performance Counter, a Hung Window and/or Native/Managed exceptions. Part 1 covers what the tool captures and the outage durations that can be expected.Part 2 goes through the wide variety of triggering options; in particular 1st and 2nd chance exceptions.Part 3 (this week) goes through Windows 8 Modern Application support and Process Monitor logging support. Resources:Sysinternals ProcDump Timeline:[00:00] - Overview of Windows 8 Modern Applications[01:09] - ProcDump v5.0 vs. PLMDebug[01:38] - Registry - Package and Application Names (AppUserModeId)[02:00] - Activation and Monitoring (-x <folder> <appusermodeid>) [04:42] - User created ProcDump[05:21] - Registry changes - DebugInformation[05:40] - PLM created ProcDump[06:53] - Process Monitor - Debug Output Profile events[09:50] - PLM behaviour for Attach vs. Launch[11:17] - And that's it for ProcDump! en Thu, 20 Jun 2013 13:34:23 GMT Thu, 20 Jun 2013 13:34:23 GMT Rev9 Re: Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor [Update: 2012-10-26: This is fixed in ProcDump v5.1]

Due to a bug in ProcDump v5.0, when using -x <folder> <appusermodeid>, some applications get "RPC server not available" exceptions and then fail. The workaround is to debug the package (not the app) and manually activate the application.

e.g.
procdump.exe -ma -e 1 -f "" -x c:\dumps <packagename>

posted by windev

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634866454802487093 Wed, 24 Oct 2012 03:18:00 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634866454802487093 windev Re: Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor You guys forgot to update the Part 1 and Part 2 notes with links to Part 3 (the "Part 3" text below Part 1 and Part 2 links).

posted by siodmy

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634871300106109797 Mon, 29 Oct 2012 17:53:30 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634871300106109797 siodmy Re: Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor Procdump 5.1 is now finally online:

http://technet.microsoft.com/en-us/sysinternals/dd996900

posted by MagicAndre1981

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634886993758207803 Fri, 16 Nov 2012 21:49:35 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634886993758207803 MagicAndre1981 Re: Defrag Tools: #11 - ProcDump - Windows 8 & Process Monitor @MagicAndre1981: Took a long time but we finally made it. Smiley  Thanks for your patience everyone.

posted by windev

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634887023455756285 Fri, 16 Nov 2012 22:39:05 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-11-ProcDump-Windows-8--Process-Monitor#c634887023455756285 windev