Sysinternals/Pstools/pslist
Jump to navigation
Jump to search
You are here: | pslist
|
Description
PsList is part of the PsTools toolkit developed by Sysinternals. It lists process locally or remotely.
Installation
PsList is part of the PsTools suite. To install it, please refer to this section.
Usage
Syntax
Usage: pslist [-d][-m][-x][-t][-s [n] [-r n] [\\computer [-u username][-p password][name|pid]
All memory values are displayed in KB. Abbreviation key:
Pri Priority Thd Number of Threads Hnd Number of Handles VM Virtual Memory WS Working Set Priv Private Virtual Memory Priv Pk Private Virtual Memory Peak Faults Page Faults NonP Non-Paged Pool Page Paged Pool Cswtch Context Switches
Options
- -d
- Show thread detail.
- -m
- Show memory detail.
- -x
- Show processes, memory information and threads.
- -t
- Show process tree.
- -s [n]
- Run in task-manager mode, for optional seconds specified.
- Press Escape to abort.
- -r n
- Task-manager mode refresh rate in seconds (default is 1).
- \\computer
- Specifies remote computer.
- -u
- Optional user name for remote login.
- -p
- Optional password for remote login. If you don't present on the command line pslist will prompt you for it if necessary.
- name
- Show information about processes that begin with the name specified.
- -e
- Exact match the process name.
- pid
- Show information about specified process.
Examples
Tree view
C:\pstools>pslist \\192.168.1.27 -u pilou -p oopsoops -t pslist v1.3 - Sysinternals PsList Copyright (C) 2000-2012 Mark Russinovich Sysinternals - www.sysinternals.com Process information for 192.168.1.27: Name Pid Pri Thd Hnd VM WS Priv Idle 0 0 1 0 0 28 0 System 4 8 78 1073 2700 252 0 smss 1208 11 3 19 3836 432 172 csrss 1332 13 13 643 26348 1900 1812 winlogon 1356 13 22 608 64332 4940 9048 services 1456 9 16 296 21748 3568 1716 svchost 240 8 72 1735 170272 32096 19556 wscntfy 3052 8 1 37 27872 2448 580 svchost 408 8 5 85 32232 3984 1448 svchost 780 8 14 260 38320 4564 1972 spoolsv 912 8 13 145 46036 6440 4100 svchost 1112 8 5 108 36464 3836 1336 httpd 1148 8 4 140 86972 44428 38040 httpd 1916 8 153 284 125060 45172 39916 avp 1168 8 49 1011 284076 10576 134688 svchost 1192 8 4 84 31008 3392 2196 jqs 1292 4 8 240 67056 1404 6476 mysqld 1532 8 20 34123 96332 24624 53576 vmacthlp 1640 8 1 25 16152 2532 616 svchost 1656 8 16 198 61100 4968 3016 svchost 1756 8 8 269 36116 4592 1792 vmtoolsd 1972 13 6 308 84020 11968 7856 TPAutoConnSvc 2896 8 5 100 32752 4184 1336 TPAutoConnect 3372 8 1 70 32068 4636 1396 alg 3528 8 5 104 32940 3644 1168 wmiapsrv 3564 8 3 144 36416 4616 1388 lsass 1468 9 23 374 42480 1756 3952 logon.scr 3036 4 1 28 18088 2364 528 explorer 1520 8 12 399 89736 22820 14204 ctfmon 1244 8 1 96 33892 3612 944 rundll32 3524 8 4 78 34832 3632 2292 avp 3696 8 15 687 148884 3548 33912 VMwareTray 3704 8 1 60 32920 4368 1768 vmtoolsd 3712 8 4 258 92268 15792 10660