←back to thread

A Linux version of the Procmon Sysinternals tool

(github.com)
166 points LelouBil | 4 comments | 31 Aug 25 22:43 UTC | HN request time: 0.002s | source
Show context
perching_aix ◴[01 Sep 25 00:56 UTC] No.45088446[source]▶
If this works remotely as well as the Windows version, I'm stoked. Polling for information (like with lsof) really rubs me the wrong way.
replies(2): >>45088480 #>>45088733 #
calvinmorrison ◴[01 Sep 25 01:02 UTC] No.45088480[source]▶
really? i have to use procman and associated utilities often and they really pale in comparison with linux and even moreso other unix utils (like dtrace)
replies(5): >>45088759 #>>45089005 #>>45089451 #>>45091282 #>>45091614 #
sirjaz ◴[01 Sep 25 02:54 UTC] No.45089005[source]▶
Windows Server 2025 supports dtrace out of the box: https://learn.microsoft.com/en-us/windows-server/administrat...
replies(1): >>45090165 #
1. cyberpunk ◴[01 Sep 25 06:52 UTC] No.45090165[source]▶
This really is the weirdest timeline…
replies(1): >>45092725 #
2. actionfromafar ◴[01 Sep 25 13:59 UTC] No.45092725[source]▶
But is it like the "real" dtrace or is like how PowerShell wget isn't actually wget but an alias for Invoke-WebRequest?
replies(1): >>45092796 #
3. p_ing ◴[01 Sep 25 14:08 UTC] No.45092796[source]▶
Two seconds of investigation yields that it is a port of dtrace.

https://learn.microsoft.com/en-us/windows-hardware/drivers/d...

replies(1): >>45093483 #
4. actionfromafar ◴[01 Sep 25 15:26 UTC] No.45093483{3}[source]▶
Well, true, but I'm not in a position to understand what that means. I remember talks about dtrace in Linux way back when and something about how "it's not the same thing, you have to add support in all of userspace which is not there" or something like that.