41–45 of 45 posts
Earlier quoted context omitted.
Original ProcMon used ETW, Event Tracing for Windows; the analogous technology (although very different in style) on Linux is eBPF so that’s what this tool uses.
I think you’re mistaken. ProcMon doesn’t use ETW on Windows and I don’t believe it ever did?
This file says it does, though only for network events: https://documentation.help/Process-Monitor/documentation.pdf
What are the differences between this and htop, by example? I know htop can strace processes with the "s" key.
This was my first thought, too. Which useful feature does this tool have what htop does not have? Let's say there is such a feature. Why did they not implement it in htop? Made a patch and offered it to upstream? This is why we have FOSS. To benefit from each other's work.
Because Ubuntu 18.04 is used for the development environment, it relies on pretty old dependencies. Bug report: https://github.com/Sysinternals/ProcMon-for-Linux/issues/44
Sorta related: If y’all haven’t used netdata - wow - it blew my socks off last night. I have it installed on all my hosts now and it’s already helping me diagnose a redis bgsave issue that I didn’t realize existed. Really well put together software.
I am odysseas, DevRel at Netdata. I would love to hear your story and what Netdata helped you diagnose in your systems.
Hit me up (odyslam) in our forums: https://community.netdata.cloud
Sorta related: If y’all haven’t used netdata - wow - it blew my socks off last night. I have it installed on all my hosts now and it’s already helping me diagnose a redis bgsave issue that I didn’t realize existed. Really well put together software.