Comment Feed for Channel 9 - Defrag Tools: #9 - ProcDump http://media.ch9.ms/ch9/defd/e87b8ed8-64a3-4042-9adc-6dbb9745defd/DefragTools9_220.jpg Channel 9 - Defrag Tools: #9 - ProcDump In this 3 part episode of Defrag Tools, Andrew Richards and Larry Larsen walk you through Sysinternals ProcDump. ProcDump allows you to capture the memory of a process running on the computer. The dump file can be of varying size and can be taken with varying outage durations. Dumps can be triggered immediately or can be triggered by a variety of events including CPU utilization, Memory utilization, a Performance Counter, a Hung Window and/or Native/Managed exceptions. Part 1 (this week) covers what the tool captures and the outage durations that can be expected.Part 2 goes through the wide variety of triggering options; in particular 1st and 2nd chance exceptions.Part 3 goes through Windows 8 Modern Application support and Process Monitor logging support. Resources:Sysinternals ProcDumpSysinternals VMMap Timeline: [01:15] - Download latest version - www.sysinternals.com[02:23] - ProcDump v5 features[03:52] - Task Manager, Process Explorer vs. ProcDump[05:32] - Dump architecture (x86 vs. x64) needs to match the target[08:02] - Mini, Full (-ma), MiniPlus (-mp) and Custom (-d) dumps[13:45] - WinDbg - rely on Mapped Memory Image File[16:54] - ProcDump Custom Dump Support (-d <dll>) - [MSDN Magazine][18:34] - Detach at Shutdown, Logoff, Console Close, Ctrl-C, Ctrl-Break[19:15] - Process Reflection (-r)[21:44] - Episode review and required permissions[23:03] - Next episode, triggering... en Fri, 24 May 2013 14:54:07 GMT Fri, 24 May 2013 14:54:07 GMT Rev9 Re: Defrag Tools: #9 - ProcDump posted by Adelino

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634841200676730323 Mon, 24 Sep 2012 21:47:47 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634841200676730323 Adelino Re: Defrag Tools: #9 - ProcDump Very nice - enjoying each week. Kind of almost which I'd found out about these after the event and could get the 'box set' and watch them all in one go, I keep wanting to go on to the next one and have to wait...

Still... gives me something to play with in-between which is also good.

posted by SolsticeBoo

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634843776111570790 Thu, 27 Sep 2012 21:20:11 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634843776111570790 SolsticeBoo Re: Defrag Tools: #9 - ProcDump Procdump 5.1 is now finally online:

http://technet.microsoft.com/en-us/sysinternals/dd996900

posted by MagicAndre1981

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634886993885948573 Fri, 16 Nov 2012 21:49:48 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-9-ProcDump#c634886993885948573 MagicAndre1981