Solved

Use of Process Explorer on Window

Posted on 2014-01-15
7
393 Views
Last Modified: 2014-01-19
Try to use Process Explorer to identify the bottleneck on Window 2003 Server.

1. How value for cpu, disk, memory, etc can I treat as abnormal ?
2. From the attached graphic, some of the PID in Process Explorer can't be find in Window Task manager. Is that correct ?

Tks
Window-performance.png
0
Comment
Question by:AXISHK
  • 3
  • 3
7 Comments
 
LVL 11

Assisted Solution

by:Manjunath Sullad
Manjunath Sullad earned 150 total points
Comment Utility
1st open command prompt and run "tasklist" to findout PID for particular program

and also cross verify whether that process ID is accessing any network shared devices by checking "netstat -no"

compare PID and run Process explorer check
0
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
1) this depends on what the system is running.  i can't make too much out of this since a lot of it is in chinese but seeing the cpu graph constantly spiking to 100% need to investigate if that is not expected

2) what do you mean by the PID not being found?  that definitely isn't task manager; looks like resource monitor.  also, items like interrupts, system idle process are not actual processes so there wouldn't be a PID
0
 

Author Comment

by:AXISHK
Comment Utility
For the attached graphic, one screen is dumped from Window Task manager and the other is dumped from Sysinternals Process Explorer.

For the PID 1108 in the attached Window Task Manager does not appear in Sysinternals Processor Explorer. Any idea ?

Is it easy to identify whether the cpu, memory, io, etc running from each process is abnormal based on the value shown in Process Explorer ?

Tks
0
Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
again, that is not windows task manager; it is resource monitor
process list does not appear on the same tab as the cpu/memory graph in task manager

regardless, 1108 is svchost which is used to run services
if you go to view -> show process tree you will see the svchost process under wininit and that PID will be there

whether resource usage is abnormal depend on what it is
for example, if you have an exchange server and you see that store.exe is using 90% of all physical memory, that is normal in that case because it's by design
0
 

Author Comment

by:AXISHK
Comment Utility
For the PID shown under Processor Explorer, Resource Monitor and Task Manager, do they relate to each other ? Do they identify the same process & task in the system ?

Great thanks.
0
 
LVL 34

Accepted Solution

by:
Seth Simmons earned 350 total points
Comment Utility
yes, each process is given a unique process ID (PID)
whatever PID you see in task manager, you'll see the same in process explorer
0
 

Author Closing Comment

by:AXISHK
Comment Utility
Tks
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now