graphic visualization of a process memory

Process Explorer has several visualization options for both individual processes and the system as a whole.


You can try:

  • Process Explorer
  • Process Hacker
  • Red-Gate Memory Tracker (this is currently experimental)

You'll likely need to get the Windows debugging tools in order for your tool of choice to hook into your process.


I would use pslist, specify the pid I was interested in, and grep for the virtual memory and working set. I would then pipe to an output file and plot it using something like graphviz (or excel if you want it really quick and dirty). This would happen in a loop.

Sounds like alot, but its only a few minutes of thinking and scripting.

C:\bin>pslist /?                                                                                                   1

pslist v1.28 - Sysinternals PsList
Copyright ⌐ 2000-2004 Mark Russinovich
Sysinternals

Usage: C:\bin\pslist.EXE [-d][-m][-x][-t][-s [n] [-r n] [\\computer [-u username][-p password][name|pid]
   -d          Show thread detail.
   -m          Show memory detail.
   -x          Show processes, memory information and threads.
   -t          Show process tree.
   -s [n]      Run in task-manager mode, for optional seconds specified.
               Press Escape to abort.
   -r n        Task-manager mode refresh rate in seconds (default is 1).
   \\computer  Specifies remote computer.
   -u          Optional user name for remote login.
   -p          Optional password for remote login. If you don't present
               on the command line pslist will prompt you for it if necessary.
   name        Show information about processes that begin with the name
               specified.
   -e          Exact match the process name.
   pid         Show information about specified process.

All memory values are displayed in KB.
Abbreviation key:
   Pri         Priority
   Thd         Number of Threads
   Hnd         Number of Handles
   VM          Virtual Memory
   WS          Working Set
   Priv        Private Virtual Memory
   Priv Pk     Private Virtual Memory Peak
   Faults      Page Faults
   NonP        Non-Paged Pool
   Page        Paged Pool
   Cswtch      Context Switches`

I use VMMAP for this very purpose.

It's a recent tool made by the Sysinternals team that brought us ProcessExplorer that was suggested in a precedent post.