Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was very surprised when to not find process monitor, which could be able to doing their work, and save some dumps with the specified periodicity. Does anyone know such like this?

share|improve this question
up vote 1 down vote accepted

There's another Systinternals tool called PSList that will give you a process list from the command line. You can create a scheduled task to run it. Let's you do list processes remotely as well. Create a batch file that redirects output to a file, schedule it and you're good to go.

share|improve this answer

Create a shell script like this:

ps aux >> /path/to/log.file

Add it to your crontab and have it run however often you'd like. This will take the output of the 'ps aux' command and APPEND it to the file you specify. If you want it to overwrite, use a single '>'.

share|improve this answer
You'll need something like Cygwin for this to work in Windows – squillman Jul 6 '10 at 20:08
Yes, thank you. I just noticed the 'Windows' flag... I'm new here. If you are trying to do this on a Windows machine, something like Cygwin is definitely required. – Mistiry Jul 6 '10 at 20:11
no worries! The windows tag I believe was edited in after your answer. Welcome to SF! :) – squillman Jul 6 '10 at 20:19
it was added after your answer :) – Zypher Jul 6 '10 at 23:49

Use procmon with the backing file option to capture process info to a file. See Procmon help for more details.

share|improve this answer

As an alternative strategy, you could turn on Process Tracking in your auditing options. This causes event log entries to be generated when processes start, end, etc (details about the log entries in the link above). Then, rather than seeing a "snapshot" of the machine at a given instant you'll see a log of all processes. Obviously, you'll have to parse the event log to get at the information you're looking for, but this method guarantees that a process won't be hidden by starting and stopping in between static "snapshot" intervals.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.