How to walk through the OS processes?

WINDBG
1

Hello all,
I am using WinDbg 6.0.17, Win 2000, NTDDK.
How to get the status of memory of all process of OS and get the statitics
of it.Basically what is the method to get such things? I can see the
processes and the handles in the debugger but how to get that
programatically? I searched the MSDN but I cannot find a helpful function.
Can u help me?
Anand.

2

You can use

!vm to see memory usage
!pool to find pool area. (if you want pool tag, you must set global fag.
dc, dd, db, du to dump memory.

These command is written in the windbg help. But programaticaly, you cannot
walk through the os process
withoug source. Assembly, you can.

-kimi

-----Original Message-----
From: xxxxx@lambenttek.com [mailto:xxxxx@lambenttek.com]
Sent: Wednesday, August 21, 2002 10:06 PM
To: Kernel Debugging Interest List
Subject: [windbg] How to walk through the OS processes?

Hello all,
I am using WinDbg 6.0.17, Win 2000, NTDDK.
How to get the status of memory of all process of OS and get the statitics
of it.Basically what is the method to get such things? I can see the
processes and the handles in the debugger but how to get that
programatically? I searched the MSDN but I cannot find a helpful function.
Can u help me?
Anand.

You are currently subscribed to windbg as: xxxxx@citrix.co.jp
To unsubscribe send a blank email to %%email.unsub%%

3

Isn’t is possible to just know what processes are running on the target
machine(programatically)?There should be some system level APIs to get
knowledge in the processes.Actually I have found some source code on
sysinternals.com but I cannot found the ntdll.lib in my machine.So that
program couldn’t be “linked”.

It’s URL is :

http://www.ddj.com/ftp/1999/1999_11/ntinfo.zip.

If u can trace it further…

Anand.