Sysinternals/Pstools/pslist
Jump to navigation
Jump to search
| You are here: | pslist
|
Description
PsList is part of the PsTools toolkit developed by Sysinternals. It lists process locally or remotely.
Installation
PsList is part of the PsTools suite. To install it, please refer to this section.
Usage
Syntax
Usage: pslist [-d][-m][-x][-t][-s [n] [-r n] [\\computer [-u username][-p password][name|pid]
All memory values are displayed in KB. Abbreviation key:
Pri Priority Thd Number of Threads Hnd Number of Handles VM Virtual Memory WS Working Set Priv Private Virtual Memory Priv Pk Private Virtual Memory Peak Faults Page Faults NonP Non-Paged Pool Page Paged Pool Cswtch Context Switches
Options
- -d
- Show thread detail.
- -m
- Show memory detail.
- -x
- Show processes, memory information and threads.
- -t
- Show process tree.
- -s [n]
- Run in task-manager mode, for optional seconds specified.
- Press Escape to abort.
- -r n
- Task-manager mode refresh rate in seconds (default is 1).
- \\computer
- Specifies remote computer.
- -u
- Optional user name for remote login.
- -p
- Optional password for remote login. If you don't present on the command line pslist will prompt you for it if necessary.
- name
- Show information about processes that begin with the name specified.
- -e
- Exact match the process name.
- pid
- Show information about specified process.
Examples
Tree view
C:\pstools>pslist \\192.168.1.27 -u pilou -p oopsoops -t
pslist v1.3 - Sysinternals PsList
Copyright (C) 2000-2012 Mark Russinovich
Sysinternals - www.sysinternals.com
Process information for 192.168.1.27:
Name Pid Pri Thd Hnd VM WS Priv
Idle 0 0 1 0 0 28 0
System 4 8 78 1073 2700 252 0
smss 1208 11 3 19 3836 432 172
csrss 1332 13 13 643 26348 1900 1812
winlogon 1356 13 22 608 64332 4940 9048
services 1456 9 16 296 21748 3568 1716
svchost 240 8 72 1735 170272 32096 19556
wscntfy 3052 8 1 37 27872 2448 580
svchost 408 8 5 85 32232 3984 1448
svchost 780 8 14 260 38320 4564 1972
spoolsv 912 8 13 145 46036 6440 4100
svchost 1112 8 5 108 36464 3836 1336
httpd 1148 8 4 140 86972 44428 38040
httpd 1916 8 153 284 125060 45172 39916
avp 1168 8 49 1011 284076 10576 134688
svchost 1192 8 4 84 31008 3392 2196
jqs 1292 4 8 240 67056 1404 6476
mysqld 1532 8 20 34123 96332 24624 53576
vmacthlp 1640 8 1 25 16152 2532 616
svchost 1656 8 16 198 61100 4968 3016
svchost 1756 8 8 269 36116 4592 1792
vmtoolsd 1972 13 6 308 84020 11968 7856
TPAutoConnSvc 2896 8 5 100 32752 4184 1336
TPAutoConnect 3372 8 1 70 32068 4636 1396
alg 3528 8 5 104 32940 3644 1168
wmiapsrv 3564 8 3 144 36416 4616 1388
lsass 1468 9 23 374 42480 1756 3952
logon.scr 3036 4 1 28 18088 2364 528
explorer 1520 8 12 399 89736 22820 14204
ctfmon 1244 8 1 96 33892 3612 944
rundll32 3524 8 4 78 34832 3632 2292
avp 3696 8 15 687 148884 3548 33912
VMwareTray 3704 8 1 60 32920 4368 1768
vmtoolsd 3712 8 4 258 92268 15792 10660