Win32 - Monitor running processes

BSOD2600 · Posted: Tue Mar 29, 2005 12:09 pm Post subject:

Hmm, it appears there are no memory, filepath, or run parameters, odd. What OS are you running this against?

Would you mind walking .1.3.6.1.2.1.25.5 and pasting the output.

BlueT · Joined: 28 Mar 2005 Posts: 4

I am running against windows 2000 server as well as xp they both are the same. I am also using snmp that comes with windows.

I dont know how to walk

if you could tell me how then i will post the results

Thanks for your help.

mumuuu · Joined: 22 Mar 2005 Posts: 6

ok i did everything & still have a question :

can cacti graph the same process like firefox when i close it & when i lunch it again .?????

if im not clear tell me

ajeskey · Posted: Tue Mar 29, 2005 3:22 pm Post subject:

mumuuu

Under your data source definitions if you set the index type to "hrSWRunName" it will look for that process name and not the PID. So your answer is "yes, but you need to change the default"

It tells you about this in the README included in the archive.

BSOD2600

thanks for a very handy add on. It's much appreciated!

ajeskey · Posted: Tue Mar 29, 2005 3:30 pm Post subject:

I am seeing some odd reports coming back from the CPU time and Memory. Everything looks clean but I think that it's an issue with my graph template, and maybe how I setup the Data Query.

Could someone post either screen captures or text details on how they have set all the fields for both the Data Queries, and Graph Template sections?

Thanks in advance

BSOD2600 · Posted: Tue Mar 29, 2005 5:13 pm Post subject:

BlueT: Odd. I'm running it against XP SP2 and Win2K3. Don't have any NT/2K boxes around to test. What service pack levels are you running? Use GetIF to walk the OID. It should provide you with a graphical representation of which OIDs are present on the sytem. Alternatively, you could get and run snmpwalk, which is part of net-snmp.

mumuuu: ajeskey has the right answer

ajeskey: I too have see some odd values for the CPU time. I'm not sure why it represents it as M.

JVandermark · Joined: 14 Dec 2004 Posts: 11

Looks like a great addon, I'll be trying it tomorrow. Looking at your example posted before shows explorer.exe taking only 16.26k on average. That's unlikely, so you should probably check that out.

BSOD2600 · Posted: Tue Mar 29, 2005 5:22 pm Post subject:

As of right now, explorer.exe is using 19,108K of memory and 13,480K of VM. I just checked the last graph and it says 19.10K.

Seems valid to me.

SxanRR · Joined: 29 Mar 2005 Posts: 1

Hey, just a reference to someones comment earlier. This is exactly what I'm looking for, but for linux / unix hosts. Is this going to ever be ported to *nix, and if not, is there already an available script that can monitor a specific process thats running? Thanks, and good work on the script BSOD.

SxanRR

ajeskey · Posted: Tue Mar 29, 2005 7:55 pm Post subject:

Heres is what I am seeings, the drop off on item1.jpg is legit, so that is not a problem.

As you can see the whole scaling is way off for me. I am sure its something that I did, but i just would like to know what!

Thanks!

BSOD2600 · Posted: Tue Mar 29, 2005 9:49 pm Post subject:

The skew in the graphing of the memory is possibly caused because of the CDEF of 'divide by 1024'. I did this so that the memory and cpu would be visable on the same graph.

I assume you already know why there are gaps in the graphs.

ajeskey · Posted: Tue Mar 29, 2005 9:53 pm Post subject:

Sounds good... good to hear I'm not going crazy^H^Her

The gaps are part of our daily cycle, we'll see if they come back tomorrow

thanks again

BlueT · Joined: 28 Mar 2005 Posts: 4

BSOD2600

Using Getif it does all right up .1.3.6.1.2.1 as soon as i add .25 it does not like it I have tried this on multiple machines including xp sp2. I am sorry i am not much help in this area.

there must be somthing i have done done differently cant see y it would work for others and not me

ajeskey · Posted: Wed Mar 30, 2005 10:09 am Post subject:

Here's a good one for you BSOD.. 114% CPU

BSOD2600 · Posted: Wed Mar 30, 2005 1:19 pm Post subject:

BlueT: That is probably because you have not installed the proper microsoft MIB or there is a conflict and GetIF didnt load the MIB. Could take a look through getif.log and see if you see anything about a microsoft MIB having issues. Give Net-SNMP snmpwalk a try:
snmpwalk -v 1 -c <community> 127.0.0.1 .1.3.6.1.2.1.25.5

ajeskey: Hmmm, odd. Paste the raw output in from a debug cycle for the relivant sections. When you manually verify the OID for that process(es), does it number seem valid?