09.02.2014 Views

Windows sysinternals

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 3 Process Explorer 61<br />

■ % Time in GC Displays the percentage of elapsed time that was spent performing a<br />

garbage collection since the last garbage collection cycle.<br />

■ Allocated Bytes/s Displays the number of bytes per second allocated on the garbage<br />

collection heap.<br />

■ Heap Bytes Displays the number of bytes allocated in all heaps in the process.<br />

■ Runtime Checks Displays the total number of runtime code access security checks<br />

performed since the application started.<br />

■ Contentions Displays the total number of times that threads in the runtime have<br />

attempted to acquire a managed lock unsuccessfully.<br />

Process I/O Tab<br />

The Process I/O tab (shown in Figure 3-11) contains attributes relating to file and<br />

device I/O, including file I/O through the LANMan and WebDAV redirectors. When you<br />

enable these columns, Procexp measures the numbers of NtReadFile, NtWriteFile, and<br />

NtDeviceIoControlFile system calls representing I/O reads, writes and “other” (respectively),<br />

and the numbers of bytes associated with those calls. The I/O counts shown by Procexp are<br />

for “private I/O”—that is, I/O operations that can be unequivocally attributed to a process.<br />

Note that memory-mapped file I/O is not necessarily attributable to a particular process.<br />

FIGURE 3-11 The Process I/O tab of the Select Columns dialog box.<br />

These are all dynamic properties, updated with each refresh. All require administrative rights<br />

in order to read these metrics for processes running under a different user account. However,<br />

they do not require administrative rights to read them for processes running under the same<br />

account even at a higher integrity level.<br />

www.it-ebooks.info

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!