ProcDump工具來自Sysinternals Suite
最近用來自動產生Dump文件
一是用來監視服務器程序無響應
procdump -accepteula -64 -ma -h server.exe
二是用來監視客戶端程序閃退(猜測是有未處理的異常)
procdump -accepteula -ma -e client.exe
注意:客戶端程序是32位,服務器程序是64位的
下面的例子來自官方介紹:
為名為“notepad”的進程產生迷你Dump文件(只能有一個匹配的進程存在)
C:\>procdump notepad
為ID為4572的進程產生完整Dump文件
C:\>procdump -ma 4572
為名為“notepad”的進程產生3個迷你Dump文件(每個之間間隔5秒鍾)
C:\>procdump -s 5 -n 3 notepad
當名為“consume”的進程超過20%CPU達到5秒時產生最多3個迷你Dump文件
C:\>procdump -c 20 -s 5 -n 3 consume
Write a mini dump for a process named 'hang.exe' when one of it's Windows is unresponsive for more than 5 seconds:
C:\>procdump -h hang.exe hungwindow.dmp
Write a mini dump of a process named 'outlook' when total system CPU usage exceeds 20% for 10 seconds:
C:\>procdump outlook -p "\Processor(_Total)\% Processor Time" 20
Write a full dump of a process named 'outlook' when Outlook's handle count exceeds 10,000:
C:\>procdump -ma outlook -p "\Process(Outlook)\Handle Count" 10000
Write a MiniPlus dump of the Microsoft Exchange Information Store when it has an unhandled exception:
C:\>procdump -mp -e store.exe
Display without writing a dump, the exception codes/names of w3wp.exe:
C:\>procdump -e 1 -f "" w3wp.exe
Write a mini dump of w3wp.exe if an exception's code/name contains 'NotFound':
C:\>procdump -e 1 -f NotFound w3wp.exe
Launch a process and then monitor it for exceptions:
C:\>procdump -e 1 -f "" -x c:\dumps consume.exe
Register for launch, and attempt to activate, a modern 'application'. A new ProcDump instance will start when it activated to monitor for exceptions:
C:\>procdump -e 1 -f "" -x c:\dumpsMicrosoft.BingMaps_8wekyb3d8bbwe!AppexMaps
Register for launch of a modern 'package'. A new ProcDump instance will start when it is (manually) activated to monitor for exceptions:
C:\>procdump -e 1 -f "" -x c:\dumps Microsoft.BingMaps_1.2.0.136_x64__8wekyb3d8bbwe
Register as the Just-in-Time (AeDebug) debugger. Makes full dumps in c:\dumps.
C:\>procdump -ma -i c:\dumps
See a list of example command lines (the examples are listed above):
C:\>procdump -? -e