Author: heyheyash
Subject: Proexp and pefmon: corresponding svchost#?
Posted: 08 April 2014 at 12:08am
Hey all,
I was performing one of the exercises early on in one of the Windows Internals books and came across something I couldn't figure out.
The perfmon exercise calls for viewing the process counters for % User Time and % Privileged Time for every process in the system. No problem there. Well perfmon labels the different instances of svchost by number so you have svchost#1, svchost#2, etc. Meanwhile, Process Explorer lists all of the svchost instances in the awesome way where you can see the child processes. I can't seem to find how these might lineup with the way Perfmon numbers them.
Is there a way to determine which svchost instance in Process Explorer corresponds to the numbered svchost instances in perfmon?
Thanks!
Subject: Proexp and pefmon: corresponding svchost#?
Posted: 08 April 2014 at 12:08am
Hey all,
I was performing one of the exercises early on in one of the Windows Internals books and came across something I couldn't figure out.
The perfmon exercise calls for viewing the process counters for % User Time and % Privileged Time for every process in the system. No problem there. Well perfmon labels the different instances of svchost by number so you have svchost#1, svchost#2, etc. Meanwhile, Process Explorer lists all of the svchost instances in the awesome way where you can see the child processes. I can't seem to find how these might lineup with the way Perfmon numbers them.
Is there a way to determine which svchost instance in Process Explorer corresponds to the numbered svchost instances in perfmon?
Thanks!
