ProcDump

ProcDump is a command-line application used for monitoring an application for CPU spikes and creating crash dumps during a spike.^[2][3] The crash dumps can then be used by an administrator or software developer to determine the cause of the spike. ProcDump supports monitoring of hung windows and unhandled exceptions. It can also create dumps based on the values of system performance counters.^[4]

ProcDump

ProcDump v9.0
Original author(s)	Winternals Software
Developer(s)	Microsoft
Stable release	v11.0 (Windows version) v1.3 (Linux version)[1] / November 3, 2022; 2 years ago (2022-11-03) (Windows version) November 3, 2022; 2 years ago (2022-11-03) (Linux version)
Repository	github.com/microsoft/ProcDump-for-Linux
Written in	C
Operating system	Microsoft Windows, Linux
Available in	English
License	Windows: Proprietary commercial software Linux: MIT License
Website	docs.microsoft.com/en-us/sysinternals/downloads/procdump

Overview

Initially, ProcDump was only available for Microsoft Windows. In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.^[5] The software is open source. It is licensed under MIT License and the source code is available on GitHub.^[6]

The Linux version requires Linux kernels version 3.5+ and runs on Red Hat Enterprise Linux / CentOS 7, Fedora 26, Mageia 6, Ubuntu 14.04 LTS. It currently does not have full feature parity with the Windows version (e.g. custom performance counters).

Example

Create 5 core dumps 10 seconds apart of the target process with process identifier (pid) == 1234

$ sudo procdump -n 5 -p 1234

See also

• Free and open-source software portal

• WinDbg
• Dr. Watson (debugger)
• kdump (Linux)
• ktrace
• Process Explorer