Re: PerfMon to get running status of a process

On 15 Mar, 16:04, "Herb Martin" <n...@xxxxxxxxxxxxxx> wrote:
"_gianluca_" <gianluca.orte...@xxxxxxxxxxxxxx> wrote in message

news:1173970379.153245.213470@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Hi,

I'm trying to use PerfMon to send an alert when process p.exe stops
running. I defined an alert on \\MyMachine\Process(p)\Thread count,
where the action must be triggered if thread count goes under 1. In
all my tests the action was never triggered, while in System Monitor
pane I can clearly see that thread count fall to 0.
I did the tests on Windows 2003, but also on Windows XP. Can someone
tell me what is wrong (or suggest an alternative way to get running
status in perfmon)?

Just for fun, make sure you can get ANY alert to work. Use thread count 1
or
something equally obvious.

Have you got the alerter and messenger service running on the sending
machine and the messenger service on the receiving machine?

Can you send "net send" messages manually?

Firewalls? Local on either machine? Intermediate firewalls?

--
Herb Martin, MCSE, MVPhttp://www.LearnQuick.Com
(phone on web site)


I've done the basics controls and everything works fine. I tested
"normal" alert conditions, such as thread number over a threshold, or
memory, CPU and I regularly saw a record on application event log.
I also tried launching perfmon with /wmi option but nothing changed.

I seems that the thread counting engine is attached to the process:
when process stops, it hangs or something...


.

Relevant Pages

  • Re: lighting---hacked!
    ... >> web server on your firewall. ... > You relay on your logging to monitor and alert you to this. ... explain about netbased firewalls and hostbased ...
    (comp.os.linux.security)
  • Re: Identifying which process is sending specific packets?
    ... TCPView from Sysinternals and Fport from Foundstone come to mind as do personal ... firewalls that can alert to activity from a process and log it such as ...
    (microsoft.public.win2000.security)
  • Re: PerfMon to get running status of a process
    ... I'm trying to use PerfMon to send an alert when process p.exe stops ... Have you got the alerter and messenger service running on the sending ... Intermediate firewalls? ...
    (microsoft.public.windows.server.general)
  • Re: Zone Labs Pro question
    ... I'm completely new to the firewalls world (got hit over the weekend by ... this trojan that loads WinVNC on your machine which scared the bejeezus out ... so I got a copy of Zone Alarm Pro). ... I get a lot of red-banded (high alert) firewall alerts for some reason I ...
    (comp.security.firewalls)
  • Zone Labs Pro question
    ... I'm completely new to the firewalls world (got hit over the weekend by ... so I got a copy of Zone Alarm Pro). ... I get a lot of red-banded (high alert) firewall alerts for some reason I ...
    (comp.security.firewalls)