Windows sysinternals

58 Part II Usage Guide
FIGURE 3-9 The Process Memory tab of the Select Columns dialog box.
These are obviously all dynamic properties and are updated with each refresh. Most of these
metrics can be read for all processes on the system without administrative rights. Procexp
requires administrative rights to read the following metrics for processes in other security
contexts: minimum and maximum working set; working set (WS) shareable, shared, and
private bytes; and GDI and USER object counts. In addition, GDI and USER counts can be
obtained only for processes in the same terminal services session, regardless of privilege:
■ Page Faults The total number of times that the process accessed an invalid memory
page, causing the memory manager fault handler to be invoked. Some reasons for
pages being invalid are these: the page is on disk in a page file or a mapped file, first
access requires copying or zeroing, and there was illegal access resulting in an access
violation. Note that this total includes soft page faults (that is, faults resolved by
referencing information not in the working set but already in physical memory).
■ Page Fault Delta The number of page faults that occurred since the previous display
refresh. Note that the column header is labeled “PF Delta.”
■ Private Bytes The number of bytes allocated and committed by the process for its
own use and not shareable with other processes. Per-process private bytes include
heap and stack memory. A continual rise in this value can indicate a memory leak.
■ Private Delta Bytes The amount of change—positive or negative—in the number of
private bytes since the previous refresh.
■ Peak Private Bytes The largest number of private bytes the process had committed at
any one time since the process started.
■ Private Bytes History A graphical representation of the process’ private byte commit
history. The wider you make this column, the longer the timeframe it shows. Note that
the graph scale is the same for all processes and is based on the maximum number of
private bytes currently committed by any process.
www.it-ebooks.info