Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Microsoft IT Linux Technology

Microsoft Brings Procmon To Linux (betanews.com) 86

ProcMon for Linux is Microsoft's newest open-source Linux software. ProcMon is a rewritten and re-imagined version of its Processor Monitor found on Windows within their Sysinternals suite. From a report: Microsoft explains, "The Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system."
This discussion has been archived. No new comments can be posted.

Microsoft Brings Procmon To Linux

Comments Filter:
  • Procmon! (Score:3, Funny)

    by Anonymous Coward on Monday July 20, 2020 @05:41PM (#60312549)
    Gotta catch 'em all!
  • I can’t find a screenshot and I’m out of town. I’m wondering how many features of pro mom survived the translation.

    For windows it was nice because there was little else that exposed this information so well. For Linux there are lots of tools to slice and review pids.

    Anyone poke it with a stick yet?

    • the poo (Score:2, Funny)

      by awwshit ( 6214476 )

      > Anyone poke it with a stick yet?

      I have a lot of respect for Russinovich, he made great tools for Windows. But you have to understand that MS software has the poo on it. You don't want to get your hands in the poo do you?

      • by Cylix ( 55374 )

        Ten years ago I would have been staunchly against getting poo on my hands. These days I’ll spin up a bash shell in Windows 10 and go to town. I still have the server in the garage, but if I just need to do something minor it is convenient.

        The laptops are a split between Mac, Ubuntu and fedora. I’ve got my hands in lots of poo now.

        One more stain won’t kill me.

        • Its the cross-contamination that I'm mostly worried about. Once you get the poo on your hands its easy to spread around and before you know it we're having a pandemic.

        • Maybe this is on its way...
          Windows 11 - Windows 10 turned up to 11 by using Linux under the hood
          • Abusing, you mean.

            As in: Not getting all the damn points of Unixy operating systems, that grew that way due to decades o experience, and trampling all over it with bad re-implementations that are the same thing but shitter and more inexperenced. But partially liked because of some modern bells and whistles icing, that do not change the badness of the base.

            Like systemd.

    • by im_thatoneguy ( 819432 ) on Monday July 20, 2020 @05:55PM (#60312613)

      Looks like it's SSH/Bash friendly.

      https://github.com/microsoft/P... [github.com]

      • Wow. Most basic damn functionality... shell scriptability ... halfway "Check".

        Is this like when Chris Rock said in that "black people vs niggahs" bit that niggahs will go tell him "I care for my kids". "What, do you want /cookie/?? You're /supposed/ to care for your kids, ya dumb fuck!"
        (I'm a foreigner. Please don't hurt me for getting the current social norms [and ways of writing and euphemisms used] regarding racism wrong.)

  • Not being Microsoft savvy but it this similar to ps?
    • Re:ps -aux (Score:4, Informative)

      by Tailhook ( 98486 ) on Monday July 20, 2020 @05:59PM (#60312633)

      No. The Russinovich/Sysinternals equivalent of ps is Process Explorer. I'm thinking dtrace might kinda/sorta be the Linux equivalent of procmon.

      • Correct, Procmon, monitors processes and everything they touch. Which file did the process in question look at, did it access the registry? What is an open, read, write, or close, or access denied types of things. If you want to know what parts of your system an application is touching then procmon is the tool of choice.

        Process Explorer is just Task Manager on steroids. Each tool has their uses you should never leave home without these tools if you are a Windows professionally... been using these for ye

      • It monitors system calls, and has a bunch of filtering and visualisation features. It's like a GUI version of strace, not dtrace.

    • No, more like htop
      • by Trongy ( 64652 )

        It's not like htop. Htop doesn't monitor system calls that process make.

        It looks a bit like strace, but probably more like bpftrace [brendangregg.com] since it's based on eBPF and BCC.

    • More like htop, probably.

  • Can we just ask why? (Score:5, Interesting)

    by nightflameauto ( 6607976 ) on Monday July 20, 2020 @05:55PM (#60312615)

    Whom among Linux developers is clamoring for this? Aren't there literally DOZENS of tools that accomplish the same thing readily available for all distributions already?

    Is this just one way Microsoft is starting to set up traditional Windows tools on Linux to get Windows developers comfortable with the idea of using Linux for if/when they start to transition Windows over to a Linux base? That might make a modicum of sense, as there's a pretty high learning curve in that transition. I wonder if they ever do make that move, will there then be a completely different mindset and toolset among Microsoft Linux developers and other Linux developers?

    • by MightyMartian ( 840721 ) on Monday July 20, 2020 @06:06PM (#60312665) Journal

      They essentially want developers to write software for Windows, regardless of whether the scripts and binaries are sitting on a Windows box or a Linux box. They basically want to extend Linux into irrelevancy. They tried smashing Linux out of existence by funding a spurious lawsuit and shitting over it at every opportunity, but that failed miserably. So now, this is just a longer game version of embrace, extend, extinguish. After all, if you're using a Windows/.NET toolkit on Linux, you'll hardly miss Linux when the next step is to strip the GNU toolkit out of it, and /bin and /usr/bin are filled with ported versions of Windows tools. Bash will be replaced by Powershell, and you can't tell whether you're logged on to a Linux terminal or a Windows terminal.

      • Re: (Score:3, Insightful)

        by AndroSyn ( 89960 )

        They essentially want developers to write software for Windows, regardless of whether the scripts and binaries are sitting on a Windows box or a Linux box.

        If there goal is to get people to write portable software that will work on both Windows AND Linux, then I'm not entirely sure I see the problem here? Isn't portable software a good thing?

        Bash will be replaced by Powershell, and you can't tell whether you're logged on to a Linux terminal or a Windows terminal.

        A shell is just a shell. It's an interface to

        • by ElizabethGreene ( 1185405 ) on Monday July 20, 2020 @07:37PM (#60312961)

          If Microsoft wants to port PowerShell to Linux and release the source under a Free Software license, please do!

          That would be PowerShell core https://github.com/powershell/... [github.com]

          I don't know if it's at feature parity yet, but it is under active development.

          • I don't know if it's at feature parity yet, but it is under active development.

            It's a sorry broken affair, some keywords don't work the way you'd expect if you're used to return/continue/break behaving like they do. This brokenness is on both Windows and Linux variants. Don't go near powershell, ever.

      • /bin and /usr/bin are filled with ported versions of Windows tools. Bash will be replaced by Powershell, and you can't tell whether you're logged on to a Linux terminal or a Windows terminal.

        Are you a fan or horror stories in general too?

      • In the past I've said most of what you're saying and I got trashed for my trouble by the Microsoft fanbois and shills.
      • I think they've adapted the other way, better to make sure that they are where developers are going to be. A lot of Linux tools already run under Powershell as it is.

        The 90's are calling, they've moved on. Hell, the CEO of Microsoft (Satya Nadella) spoke at Red Hat not that long ago. If Richard Stallman and Linus Torvalds can get over the past, so can Slashdot.
        * Richard Stallman speaks at Microsoft, states "we should not maintain a burning grudge over actions that ended years ago"
        * Linus Torvalds quoted at

        • The point is they eamttto be the gatekeeper. That has become very clear.

        • Has MS moved out of the OS market then? Are they no longer a competitor who would have a very wide smile if GNU/Linux suddenly died?

          • Competition is inherently a good thing. By the explicit design of the license you can't kill Linux. You can't buy it out. You can't kill it through by patent attorney - remember SCO? It's a strawman argument. It's long past time to move on.

      • After all, if you're using a Windows/.NET toolkit on Linux, you'll hardly miss Linux when the next step is to strip the GNU toolkit out of it, and /bin and /usr/bin are filled with ported versions of Windows tools. Bash will be replaced by Powershell, and you can't tell whether you're logged on to a Linux terminal or a Windows terminal.

        You can look at this from an accountants point of view too. You'll hardly miss windows when your .net works everywhere else too and the shells look the same. You know what, been free of Windows since 2003, and I don't miss it. I don't miss the continual updates, I don't miss the broken network layer, I don't miss the malware or the unexpected extras you get from installing things.

        If you have a network of thousands of machines running IIS/.net and it works just fine on Apache/mono then why pay for the additi

    • Re: (Score:3, Insightful)

      Microsoft wants us to care about their crap in the hopes we might fix their shit. There was a time, 20 years ago, where I'd have been willing to fix their shit just because I was sick of it.

      But that was 20 years ago, now I just don't need their shit, and I don't want to fix it, or look at it, or even acknowledge that it exists anymore.

    • I think that's the problem they're trying to solve isn't it? There are dozens of disparate applications that together accomplishes what procmon does? I don't know if the linux promon does all of the things windows procmon does, but if it does It'll make my life easier.

      I don't think it's largely the developers that would be clamoring for it, it's the people trying to figure out WTF a developer did and how that interacts with the system that may be interested in it.

      One tool that integrates all the things tha
    • I don't think they're marketing toward Linux natives, like you're speculating.

    • Whom among Linux developers is clamoring for this?

      Who cares about Linux developers? Sometimes a Windows developer will use Linux and may want a familiar tool.

      The reverse applies too. There's a windows build for emacs, oh the humanity, what Windows developer would be clamoring for that when they already have a complicated OS.

    • by AmiMoJo ( 196126 )

      There are literally DOZENS of tools that edit text readily available for all distributions already, doesn't meant people are going to stop writing new text editors.

      It seems like a nice tool that pulls together a load of information and is easy to use. The great thing about open source is that there is room for everyone and the good ideas float to the top, so let's see if it's made of wood or not.

    • One of those will happen in the long run: Linuxify Windows or Windowsify Linux.

    • by rastos1 ( 601318 )

      I'm not clamoring for this, but I'm not aware of a linux tool that tells you the callstack that led to the particular system call, tool that would tell you who accessed a particular file (unless you turn on auditing on the whole filesystem), what was the thread id, which process has sent the packet, what was the message exchanged on dbus, etc.

      May be I'm just ignorant of the existing linux tools and need enlightening. But IMHO strace/htop/tcpdump is not a solution to every problem.

    • Microsoft's "linux" crowd is!
      They are the types who drank ALL the kool-aid, but want to bring the non-linux MS admins onto their boat. With as many MS banners and bells and whistles and eldrich abominations as possible.

      We know they don't really got the philosophical points and decsdes of experience behind the whole Unix and open source thing. Cargo culting them at best. Considering them a nuisance due to lack of understanding and experience, like Poettering, at worst.

    • By porting Windows tools to Win-Linux and encouraging Windows users to use them instead of more common Linux tools, MS ensures that people are used to the Windows versions and expect them to be there, so that when they get on any other Linux distro, they get frustrated and think it stinks because it lacks basic system tools, and they never want to use anything besides Microsoft's, because it has everything they need.

    • by robinsc ( 84714 )

      Microsoft ui is generally better than many opensource UIs. Also having the same UI cross platform is also a plus. I don't see any downside to it and the sysinternal tools are really high quality. If they can maintain the same quality on Linux I for one wold be glad to give it a whirl.

  • top, htop, gkrellm, and that other one that i find annoying good ol conky that cant decide to be a windowed app or an embedded sticky thing
  • Free download: Microsoft Process Monitor [microsoft.com].

    I don't know the purpose of using Microsoft Process Monitor. There are a lot of lines that say "Desired Access".

    Free download: Microsoft Process Explorer [microsoft.com].

    Process Explorer is excellent. Why does Firefox use a lot of CPU percentage when it is not being viewed? Waterfox is worse.

    It's possible to save a session with the Firefox Session Manager add-on, then kill Firefox with Process Explorer, then re-start only the windows and tabs you continue to want. That
  • I can see systemd and half a dozen zombie pulseaudio processes.

  • by Your Average Joe ( 303066 ) on Monday July 20, 2020 @10:08PM (#60313297)

    Who is exactly in need of this? Nobody.

    We are in need of a version of SAMBA that is on par with Microsoft windows server.

    We are in need of all file formats public so OpenOffice or Libre office can make exact office files.

    We are in need of tools to replace excel with something more centralized.

    We are in need of running Windows services on prem with our own cloud, not Azure

    We are in need of windows 10 remote services so we do not have to run windows 10 in the MS cloud.

    The only way for microsoft to continue to make money like they did in the past is to Rob, Rape, Pilliage and burn. If they mess that up and get things in the wrong order they will fade into irrelevance. I am speaking on the money and stock market.

    • Who is exactly in need of this? Nobody.

      You can say that about most things in IT. Few people "need" anything. Hell we don't "need" Linux at all. Everyone could just run Windows. The reality though is people want options, they want different things, and since it's no longer the early 90s you'll find developers that often run more than one OS and actually appreciate having the same toolset available regardless of which OS they are using.

      If they mess that up and get things in the wrong order

      Microsoft has 156000 employees. I'm sure they can work on two things at once. Maybe even three.

      • Microsoft has 156000 employees. I'm sure they can work on two things at once. Maybe even three.

        You have clearly never opened a support case with MS.

        • You have clearly never opened a support case with MS.

          You're begging the question if MS actually handles its own support cases. I have opened support cases. There is no doubt in my mind that not only were the Indians I was bounced between not working for MS, they seemed to not have a clue about MS's products either.

          Fortunately I got an RMA fairly quickly.

          • I should mention I got that RMA after being asked to factory reset my computer to resolve a fan making a grinding noise. Yes that's something support asked me to do.

    • by AmiMoJo ( 196126 )

      We are in need of all file formats public so OpenOffice or Libre office can make exact office files.

      The file format is open, that's not the problem. The problem is trying to match behaviour between two apps. Look at how much effort has gone into formalising how web browsers render HTML/CSS and even so there are differences between them.

      We are in need of tools to replace excel with something more centralized.

      No we want it to be less centralized. Ditch all the different scripting systems, standardize on Javascript and HTML/CSS for graphics.

      We are in need of running Windows services on prem with our own cloud, not Azure

      Azure is mostly Linux. You can migrate everything away to your own Linux server but what keeps people on Azure is the integration with develo

      • by Bert64 ( 520050 )

        The format is semi open, but the spec is quite poor - largely to make interoperability difficult (see all the detailed teardowns people did when they tried to force it through the iso standards track)... Add to that, their own implementations don't actually comply with the published spec anyway.

    • Who is we? Those sound like some pretty niche requirements. Why re-invent the wheel when you can already do all that in Windows?
    • MS Office file formats are already "open". OOXML.

      But instead of writing a proper standard and then building their code according to that, they just poured their entire software package's spaggetti code into a huge, gigantic "standard" (yeah, like HTML5), that nobody can fully understand, but is technically "open" ... to act like an option for standardization to international bodies (with or without moles)...
      And that is the point.

  • The latest Process Explorer for Windows (v16.34) phones home for some reason, while it didn't in previous versions. I know because I had to blacklist it in my firewall. Therefore, I wouldn't be surprised if this new ProcMon phoned home, because most Linux users wouldn't notice it unless they use an interactive per-app firewall like OpenSnitch.

  • Microsoft just rediscovered and reimplemented the "top" or "htop" command
  • It looks like strace with a curses ui, so you are limited to whatever filtering options it implements rather than being able to pipe the output into another app for processing?

  • Tracing syscalls, looking at files open by a program, etc.

    Though ideally, on a proper "everything is a file" UNIX system, listing /proc/ in the form of a table, and should already do the trick. And tail -f /proc/$mypid/syscalls should do systcall tracing. Though the latter is sadly not available, even though I could write a patch that does it pretty quickly.

  • Isn't the shorter way to say "rewritten and re-imagined" just "ported"?

    I didn't RTFA, so maybe I missed it. Could be it's all fancy and possibly schmancy, and not a simple re-implementation of the same functionality.

    Guess I try that RTFA thing, and see.

If you think the system is working, ask someone who's waiting for a prompt.

Working...