ProcDump for Linux
Summary
Microsoft ports ProcDump as a command line tool that automatically creates memory dumps under Linux when measurable process states occur. ProcDump for Linux is free software from Microsoft. The tool is modelled on Sysinternals ProcDump.
Ideas
- ProcDump monitors processes by name or process ID.
- CPU and memory thresholds can trigger a dump.
- Time windows prevent reactions to short, non-critical spikes.
- Core dumps preserve the process state for later analysis in a debugger.
Insights
- Automatic evidence collection helps with rare production bugs.
- A good trigger distinguishes symptoms from normal load.
- Cross-platform diagnostic terms make mixed operations easier.
Facts
- The dumps created can be examined with gdb.
Recommendations
- Test triggers and storage requirements before using it in production.
- Treat dumps as confidential and limit retention times.
References
Links to the original source and the Web Archive open in a new tab.