Author: ruifsp
Subject: Procmon Stops other processes from running.
Posted: 24 September 2016 at 4:36pm
Hi,
Subject: Procmon Stops other processes from running.
Posted: 24 September 2016 at 4:36pm
Hi,
I've been struggling with ProcMon version 3.31 (also tried with older ones and result was the same) where an application I need to "debug" slows to almost stopped when I run process monitor on the machine the application is running.
The application is transcoding video from one network location into another using SMB share to access the source file and SMB share to write the resulting file and uses almost 100% CPU on steady state. These shares are in different servers.
When Procmon starts monitoring the machine, the application CPU usage goes to 0%... and not transcoding is done...
What I found so far is that if while running Procmon I disable PROCMON23 filter driver using the following command on a command line "fltmc.exe detach PROCMON23 \device\MUP\" the application returns to full speed.
If the filter (PROCMON23) is loaded but procmon is not monitoring (it can be open but as long it's not monitoring) the application uses the CPU and runs.
If PROCMON23 filter is detached using the command above, procmon does not affect the application performance, but I cannot log the filesystem events on the machine and so procmon becomes useless...
Anyone has a suggestion on what to do next?
Any alternatives to procmon that produce the same level of info on a system?
Thanks a million
Cheers