09.02.2014 Views

Windows sysinternals

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

338 Part II Usage Guide<br />

disk), Diskmon reports events that involve the physical disk. For every disk read and write,<br />

Diskmon identifies the disk and sector numbers, the amount of data read or written, and the<br />

duration of the operation. You can also run Diskmon as a taskbar notification area icon where<br />

it acts as a disk activity light, appearing as a green LED when there is disk read activity and as<br />

a red LED when there is disk write activity.<br />

Diskmon requires administrative rights, and it works on all supported versions of <strong>Windows</strong>.<br />

As you can see in Figure 12-3, Diskmon assigns a sequence number to each event and<br />

displays it in the first column. If Diskmon’s internal buffers are overflowed during extremely<br />

heavy activity, this will be reflected with gaps in the sequence numbers.<br />

FIGURE 12-3 Diskmon.<br />

The Time column indicates the number of seconds elapsed between the start of the trace<br />

and when the request was initiated. This trace start is reset when you clear the results by<br />

pressing Ctrl+X or clicking the Clear toolbar button. You can choose to display clock time<br />

in this column instead (with or without milliseconds) from the Options menu. The Duration<br />

column indicates how long the requested read or write operation took to complete, in<br />

seconds.<br />

Note that the Disk column reports the zero-based disk number, not a partition or volume<br />

number, and that a hard disk can have multiple volumes associated with it. The Length<br />

column indicates the number of sectors that were read or written. Most hard disk sectors are<br />

512 bytes.<br />

The menu and toolbar buttons work the same as in many other Sysinternals monitoring<br />

utilities. Press Ctrl+E to toggle data capture on and off. Choose Save or Save As from the File<br />

menu to write the displayed results to a tab-delimited text file. Toggle Autoscroll on to keep<br />

the most recently captured events displayed. Search for specific text in the results by pressing<br />

Ctrl+F, and repeat searches with F3. Limit how many events to retain and discard older<br />

events by setting the History Depth. Select one or more rows and copy their contents to the<br />

www.it-ebooks.info

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!