Sysinternals/Pstools/pslist

From aldeid
Jump to navigation Jump to search
You are here:
pslist

Description

PsList is part of the PsTools toolkit developed by Sysinternals. It lists process locally or remotely.

Installation

PsList is part of the PsTools suite. To install it, please refer to this section.

Usage

Syntax

Usage: pslist [-d][-m][-x][-t][-s [n] [-r n] [\\computer [-u username][-p password][name|pid]

All memory values are displayed in KB. Abbreviation key:

Pri         Priority
Thd         Number of Threads
Hnd         Number of Handles
VM          Virtual Memory
WS          Working Set
Priv        Private Virtual Memory
Priv Pk     Private Virtual Memory Peak
Faults      Page Faults
NonP        Non-Paged Pool
Page        Paged Pool
Cswtch      Context Switches

Options

-d
Show thread detail.
-m
Show memory detail.
-x
Show processes, memory information and threads.
-t
Show process tree.
-s [n]
Run in task-manager mode, for optional seconds specified.
Press Escape to abort.
-r n
Task-manager mode refresh rate in seconds (default is 1).
\\computer
Specifies remote computer.
-u
Optional user name for remote login.
-p
Optional password for remote login. If you don't present on the command line pslist will prompt you for it if necessary.
name
Show information about processes that begin with the name specified.
-e
Exact match the process name.
pid
Show information about specified process.

Examples

Tree view

C:\pstools>pslist \\192.168.1.27 -u pilou -p oopsoops -t

pslist v1.3 - Sysinternals PsList
Copyright (C) 2000-2012 Mark Russinovich
Sysinternals - www.sysinternals.com

Process information for 192.168.1.27:

Name                             Pid Pri Thd  Hnd      VM      WS    Priv
Idle                               0   0   1    0       0      28       0
  System                           4   8  78 1073    2700     252       0
    smss                        1208  11   3   19    3836     432     172
      csrss                     1332  13  13  643   26348    1900    1812
      winlogon                  1356  13  22  608   64332    4940    9048
        services                1456   9  16  296   21748    3568    1716
          svchost                240   8  72 1735  170272   32096   19556
            wscntfy             3052   8   1   37   27872    2448     580
          svchost                408   8   5   85   32232    3984    1448
          svchost                780   8  14  260   38320    4564    1972
          spoolsv                912   8  13  145   46036    6440    4100
          svchost               1112   8   5  108   36464    3836    1336
          httpd                 1148   8   4  140   86972   44428   38040
            httpd               1916   8 153  284  125060   45172   39916
          avp                   1168   8  49 1011  284076   10576  134688
          svchost               1192   8   4   84   31008    3392    2196
          jqs                   1292   4   8  240   67056    1404    6476
          mysqld                1532   8  20 34123   96332   24624   53576
          vmacthlp              1640   8   1   25   16152    2532     616
          svchost               1656   8  16  198   61100    4968    3016
          svchost               1756   8   8  269   36116    4592    1792
          vmtoolsd              1972  13   6  308   84020   11968    7856
          TPAutoConnSvc         2896   8   5  100   32752    4184    1336
            TPAutoConnect       3372   8   1   70   32068    4636    1396
          alg                   3528   8   5  104   32940    3644    1168
          wmiapsrv              3564   8   3  144   36416    4616    1388
        lsass                   1468   9  23  374   42480    1756    3952
        logon.scr               3036   4   1   28   18088    2364     528
explorer                        1520   8  12  399   89736   22820   14204
  ctfmon                        1244   8   1   96   33892    3612     944
  rundll32                      3524   8   4   78   34832    3632    2292
  avp                           3696   8  15  687  148884    3548   33912
  VMwareTray                    3704   8   1   60   32920    4368    1768
  vmtoolsd                      3712   8   4  258   92268   15792   10660

Comments