Determining How long the application has been running for

Harishkumar
Harishkumar used Ask the Experts™
on
Hi all

I am developing a system logger. I am able to get all the running processes on the system. I need to know when the process started and when it closes I need to when it closed. In between I need to now how long this process has been running for. If I am missing some thing please let me know.

Harish
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
VK

Commented:
Hello Harishkumar !

You wrote:

"I am able to get all the running processes on the system."

1. When your sytem logger runs in the background you should be able to know when a process is terminated. So you will know the end of the period.

2. To get the start time, your app should run at system start an get all running processes.

If you don't mean that, please explain.

v.k.
GetProcessTimes
The GetProcessTimes function retrieves timing information for the specified process.

BOOL GetProcessTimes(
  HANDLE hProcess,           // handle to process
  LPFILETIME lpCreationTime, // process creation time
  LPFILETIME lpExitTime,     // process exit time
  LPFILETIME lpKernelTime,   // process kernel-mode time
  LPFILETIME lpUserTime      // process user-mode time
);
Parameters
hProcess
[in] Handle to the process whose timing information is sought. This handle must be created with PROCESS_QUERY_INFORMATION access. For more information, see Process Security and Access Rights.
lpCreationTime
[out] Pointer to a FILETIME structure that receives the creation time of the process.
lpExitTime
[out] Pointer to a FILETIME structure that receives the exit time of the process. If the process has not exited, the content of this structure is undefined.
lpKernelTime
[out] Pointer to a FILETIME structure that receives the amount of time that the process has executed in kernel mode. The time that each of the threads of the process has executed in kernel mode is determined, and then all of those times are summed together to obtain this value.
lpUserTime
[out] Pointer to a FILETIME structure that receives the amount of time that the process has executed in user mode. The time that each of the threads of the process has executed in user mode is determined, and then all of those times are summed together to obtain this value.
Return Values
If the function succeeds, the return value is nonzero.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

Remarks
All times are expressed using FILETIME data structures. Such a structure contains two 32-bit values that combine to form a 64-bit count of 100-nanosecond time units.

Process creation and exit times are points in time expressed as the amount of time that has elapsed since midnight on January 1, 1601 at Greenwich, England. The Win32 API provides several functions that an application can use to convert such values to more generally useful forms.

Process kernel mode and user mode times are amounts of time. For example, if a process has spent one second in kernel mode, this function will fill the FILETIME structure specified by lpKernelTime with a 64-bit value of ten million. That is the number of 100-nanosecond units in one second.

Requirements
  Windows NT/2000: Requires Windows NT 3.5 or later.
  Windows 95/98: Unsupported.
  Header: Declared in Winbase.h; include Windows.h.
  Library: Use Kernel32.lib.

See Also
Processes and Threads Overview, Process and Thread Functions, FILETIME, FileTimeToDosDateTime, FileTimeToLocalFileTime, FileTimeToSystemTime

Vb syntax is like this:
-----------------------
Public Declare Function GetProcessTimes Lib "kernel32" Alias "GetProcessTimes" (ByVal hProcess As Long, lpCreationTime As FILETIME, lpExitTime As FILETIME, lpKernelTime As FILETIME, lpUserTime As FILETIME) As Long

Public Type FILETIME
        dwLowDateTime As Long
        dwHighDateTime As Long
End Type

Thats it ;)
You only need now the process id for the process
you like to now the timings...

Author

Commented:
Thanks WolfgangKoenig

I could understand a lot from your comment. I even have a sample of this sort in API Guide (KPD Team). But the problem with this is I am not able to convert this in to real useful values. I did not know the time reference this API uses. If you could explain it a little more...

Any way here is the points for you.

Harish

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial