Earlier quoted context omitted.
Original ProcMon used ETW, Event Tracing for Windows; the analogous technology (although very different in style) on Linux is eBPF so that’s what this tool uses.
I think you’re mistaken. ProcMon doesn’t use ETW on Windows and I don’t believe it ever did?
ProcMon for Linux (Preview)
21–30 of 45 posts
Re: ProcMon for Linux (Preview)
#22Something that is really cool about Sysinternals tools are that they have a pretty usable GUI (granted, once you need to understand what does each UI icon do). Mimicking this experience in the TUI/terminal would certainly be a challenge. I would love to have a Procmon and ProcessExplorer equivalent with the GUI on Linux and macOS.
Re: ProcMon for Linux (Preview)
#23Something that is really cool about Sysinternals tools are that they have a pretty usable GUI (granted, once you need to understand what does each UI icon do). Mimicking this experience in the TUI/terminal would certainly be a challenge. I would love to have a Procmon and ProcessExplorer equivalent with the GUI on Linux and macOS.
i always thought of the sysinternals tools as like the missing tools that just ship with unix systems. without them, there was no real visibility into open file descriptors, network ports, command lines for running processes, thread trees for processes or any of the rest. the gui was always just the windows way of presenting it. bringing a gui when the rich tools already exist on linux seems ... redundant? (seeing th…
Re: ProcMon for Linux (Preview)
#24Re: ProcMon for Linux (Preview)
#25Re: ProcMon for Linux (Preview)
#26Bug report: https://github.com/Sysinternals/ProcMon-for-Linux/issues/44
Re: ProcMon for Linux (Preview)
#27Earlier quoted context omitted.
i always thought of the sysinternals tools as like the missing tools that just ship with unix systems. without them, there was no real visibility into open file descriptors, network ports, command lines for running processes, thread trees for processes or any of the rest. the gui was always just the windows way of presenting it. bringing a gui when the rich tools already exist on linux seems ... redundant? (seeing th…
This was my reaction as well. I haven't used Process Monitor/Process Explorer for a while, are they bringing anything to the table that's not covered by htop? With htop, I can even start tracing a process (using strace) or list the file opened by a process (using lsof) right inside htop. As might be obvious by now, I think htop has a fantastic TUI that also fits its use case very well. Of course there are other tools…
Hmmm... didn't know it could do that.
Re: ProcMon for Linux (Preview)
#28Earlier quoted context omitted.
18 is already 3-4 years ago :)
The version itself is fine, but specifically listing Ubuntu as a system requirement is strange. If Ubuntu truly is a requirement, the name of the project should be "ProcMon for Ubuntu". Presumably it isn't, and the README should list the actual requirements (kernel versions, etc.), with a note to the effect of "packages are available for Ubuntu LTS releases since 18.04".