12 ms·
ProcMon for Linux
- deleted 6y ago[deleted]
- elitistphoenix 6y agoUmm... wut?!
- zaggynl 6y agoNeat, I already use fatrace on Linux but hurray for more tools.
- boramalper 6y agoLooking forward to the first EEE comment. :)
- verroq 6y agoThat's literally what Windows Subsystem for Linux is. Trying to integrate Linux into Windows.
- maaarghk 6y agoWhere's the extinguish? Get everyone so addicted to procmon for Linux that they stop paying for strace?
- verroq 6y agoYou're skipping ahead of yourself, wait for them to build proprietary extensions in WSL. The entire point is move people away from Linux and back onto the gimped version of the platform provided by MS. Case in point: https://news.ycombinator.com/item?id=23867754 https://news.ycombinator.com/item?id=23867754
- MCOfficer 6y agoNot sure how this relates to the project at hand. It's a process manager. for linux.
- arp242 6y agoMicrosoft making their products better? What an absolutely evil plot they're concocting! Ya'll stuck in the Microsoft of 20 years ago. I hold no great love for Microsoft or its products, and large corporate power can always be abused, but screeching "EEE!" at the slightest hint with no evidence based on assumptions on what they might do in 5 years is just silly.
- lokedhs 6y agoI wouldn't say there is no evidence. And as for previous behaviour, people used to applaud what they were doing when they were embracing OS/2.
- UI_at_80x24 6y ago"Fool me once ..." MS (like all corporations) only cares about one thing, making money. It's not silly to distrust a corporation that has repeatedly in the past stolen, subverted, and act in bad faith as soon as a 'threat' to their complete dominance has shown up. Yes, most of the old-guard are gone. (Gates, Ballmer, etc) But I'm not entirely ready to trust them yet. (Windows10 telemetry, not honouring user-defined configuration [Peer-to-Peer updates active even though it's disabled in user-facing options], Candy Crush and all other game 'apps' being pulled from the MS store.) So they aren't even acting wholly trustworthy now, even under this current management. Why would I trust them to be nice with Linux?
- diffeomorphism 6y agoEmbrace linux by offering WSL. Extend by offering stuff exclusive to WSL, e.g. their directX and cuda stuff. Embrace by releasing procmon, powershell, ... . <-- You are here. Then offer nice additional features that happen to only be available on some blessed config/integration with AD/...
- pjmlp 6y agoEmbrace linux by offering NDK Extend by offering stuff exclusive to Android, e.g. their Java and NDK Native APIs stuff. Embrace by releasing Play Store only APIs, ... . <-- You are here. Then close down NDK to anything that isn't Android relevant.
- diffeomorphism 6y agoSo your argument is "but, but google is doing it, too!"? ... and that makes it better/worse/look a three-headed monkey is behind you?
- pjmlp 6y agoYes, because apparently for the MS hating crowd everything is fine when Google and others are is doing it. How are you enjoying the BSD upstream updates done by Sony?
- diffeomorphism 6y agoSo monkey and some "crowd" supposedly is doing something, okay.
- pjmlp 6y agoLuckily I don't have a FOSS agenda that pretends that some corporations are better than others with human characteristics. The time of rainbow colours and cheerful music is long gone for me.
- 6y ago
- pjmlp 6y agoWindows supports POSIX since Windows NT, released in 1993. WSL is only the realization that Linux killed POSIX and noways the Linux ABI is more relevant than POSIX. Something that other UNIX clones like Solaris, illumos, SmartOS and FreeBSD also support.
- kitotik 6y agoNice self-fulfilling prophecy! This tool seems to be the first foray into the second ‘E’.
- SahAssar 6y agoHow is releasing a tool for linux "extending" it? If so every company that has ever shipped software for linux has "extended" it. Extend would be forking the linux kernel and adding a bunch of interfaces for it that somehow have patents owned by MS so that they could not be reintegrated into mainline. Extinguish would be to get all the distros to start using MS'es kernel and interfaces instead of mainline. If we think back to the web, MS releasing software for linux is like them having a webpage. MS forking and adding proprietary interfaces to the kernel would be like all the DX filters and activeX apis added to IE. MS getting dominant players to use those interfaces would be like all the webpages having "Works best in IE6" logos. This is still firmly in the first E. It could be argued that back when you could only develop Azure Sphere (their IoT linux distro) on windows it started to creep into the second E, but now you can develop for it on linux too, so perhaps that puts us back on the first E. The directX stuff in WSL is definitely a second E move though.
- pjmlp 6y agoSurely, then we can always bring Tizen, Android and ChromeOS into the comments as well.
- nindalf 6y agoI wonder if we could train something that would automatically generate typical comments on HN threads. - This is EEE! - No it's not, there is no third E - Well, back in the 90s such and such happened - Microsoft has changed! Look at VS Code! - Electron is slow. - Buy a better machine. - what about the millions who can't afford a better machine? - Electron can be good, just code better. - but muh privacy - exactly, VS Code is going to take over the world with it's knowledge about your coding habits - It's all about Azure nowadays, anyway. - Azure has terrible customer support, we should use bare metal.
- deleted 6y ago[deleted]
- chrizyuen 6y agoneed root permission. Can we have normal permission ProcMon with less feature?
- Stratoscope 6y agoGreat idea. I would start by filing an issue here: https://github.com/microsoft/ProcMon-for-Linux/issues https://github.com/microsoft/ProcMon-for-Linux/issues There would have to be some limitations when not running as root, but it would still be useful for looking at your own processes. I always like it when an app can be installed "per-user" as an alternative to a systemwide install.
- DevKoala 6y agoWSL is becoming more attractive as a development environment by the day. Maybe my next computer in 4-5 years won’t be a Mac. I miss having access to Windows games.
- harha 6y agoIt’s getting better but the inconsistent UI (Control Panel and that other thing) and garbage that comes with it is still quite annoying. There’s probably some corporate environment to avoid the latter, but I’d still rather not have random apps installing when I simply buy the pro version.
- rawoke083600 6y agoProton(linux) is surprisingly good !
- szszrk 6y agoDoes it really work on WSL? Not for me on WSL 1, maybe on WSL2 it's different. It does not mention that on their page either.
- exdsq 6y agoWSL2 is essentially a Linux VM while WSL1 is a thin emulator. It’s much better but still not perfect, thinks like Nix can be a bit awkward.
- eknkc 6y agoRecently switched from mac to windows (wsl2). My previous attempts (switching to linux or wsl1) all failed miserably but the wsl2 is pretty good. And I could build a PC as I wish. Weird times.
- diarrhea 6y agoWhat makes WSL2 work for you, where WSL1 failed?
- 6y ago
- galacticaactual 6y agoFantastic. This is going to completely overhaul how anomaly detection engineering is done in Linux.
- jrockway 6y agoThis is just a UI. eBPF was the big innovation in Linux tracing and it's been around for years.
- kalium-xyz 6y agoAdvanced tracing like BPF is amazing and the slow but steady adaption of these tools in one form of another will bring us closer to a sane and comfortable future of transparency and reduced complexity. Glad microsoft is also on the train with WSL.
- TimTheTinker 6y agoI'm just waiting for Microsoft to invert WSL into LSW. Specifically, I hope they release their own branded Linux distro, built on Ubuntu/Debian, with an optional KVM-hosted NT kernel for Windows syscall support. Maybe call it Windows NC (for Next Century). I'll probably leave MacOS behind at that point on my work machine, especially if they create a display-PS compositing window manager that's anywhere as good as MacOS's.
- danappelxx 6y agoEmbrace, extend...
- pjmlp 6y agoSomeone else did it first, https://www.android.com/ https://www.android.com/ https://www.chromium.org/chromium-os https://www.chromium.org/chromium-os
- vms20591 6y agoExtinguish!
- vms20591 6y agoDownvote all you can fanboys! this is just another disposable account, with no real value to me :D I'd say it again and again, every single Evil corp like Microsoft practices "Embrace, Extend & Extinguish".
- Iolaum 6y agoFor all the hate it gets, the GPL protects from exactly that. Microsoft would need to publish all changes in the copyleft components of the shipped OS.
- hawski 6y agoMost of the components would be outside of kernel, so it would not be GPL.
- miguelmota 6y agoThis is pretty sweet. Hoping someone makes an Arch AUR package for it
- deleted 6y ago[deleted]
- drol3 6y agoI am continually impressed with the changes Microsoft has made since Satya Nadella took over :)
- grugagag 6y agoI’ll laugh when they get to the third e. It’s the same tricks that they’ve played before, but everyone is too young to remember it on their own skin and the older ones who remember are ridiculed. They’re moving just like the frog stays comfortable in the slowly boiling pot, with a slow and steady embrace. Their target audience is unsuspecting as if Microsoft has become some kind of altruistic force. But no monster of that size is altruistic, they’re hungry for fresh souls:) And they’ll have ‘em it seems. It won’t hurt, the denial will mitigate the pain.
- bvelica 6y agoOK, I am one of the young ones :) What are you talking about ? Thank you!
- SahAssar 6y agohttps://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...
- Jleagle 6y agohttps://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...
- dangravell 6y ago"Embrace and extend" I think - appear to adopt or support a technology only to attempt to influence, limit and block later developments. Other examples: J#, the Office XML standards etc etc
- bvelica 6y agoAaaa... yes I understand! Thank you
- jez 6y agohttps://en.m.wikipedia.org/wiki/Embrace,_extend,_and_extinguish https://en.m.wikipedia.org/wiki/Embrace,_extend,_and_extingu... The “third e” is extinguish.
- unmole 6y agoThis seems to use eBPF. As far as I know, WSL2 doesn't support eBPF. I don't understand how this can be seen as the Extend part of EEE. People really need to calm down.
- skissane 6y agoI don't understand why WSL2 wouldn't support eBPF. It is a mostly vanilla[1] Linux kernel running under a hypervisor, so why couldn't a kernel with eBPF support be used? Indeed, Microsoft's WSL2 kernel has eBPF JIT support turned on – https://github.com/microsoft/WSL2-Linux-Kernel/blob/master/Microsoft/config-wsl#L1352 https://github.com/microsoft/WSL2-Linux-Kernel/blob/master/M... WSL1 yes I agree, it is just a translation layer between Linux and NT syscalls, and features such as eBPF would not be implemented in such a layer. [1] there may at times be various enhancements to HyperV paravirt drivers that haven't been upstreamed yet
- unmole 6y agoI didn't realise WSL2 ran a real Linux kernel. TIL!
- olafure 6y agoDoes it have telemetry built in? https://github.com/microsoft/ProcMon-for-Linux/search?q=telemetry&unscoped_q=telemetry https://github.com/microsoft/ProcMon-for-Linux/search?q=tele...
- svntid 6y agoyou bet it has it would not be Micro$oft if they did not
- maccard 6y agoSorry, but can you back this accusation up? I've looked, and I don't see anything in the source code linked.
- GrayShade 6y agoI felt the same as you, but that doesn't look like "phoning home" telemetry, but rather the events returned by the OS. https://github.com/microsoft/ProcMon-for-Linux/blob/70d5196efce7e4e625912ceadccadbcc42f83af4/src/common/telemetry.h https://github.com/microsoft/ProcMon-for-Linux/blob/70d5196e...
- svntid 6y agothe error log after installing this "tool" pretty much sums it up for me stopping now [-ferror-limit=] 20 errors generated.
- svntid 6y agothis headline is absolutely misleading and a lie - the tool does in fact not run on linux
- Legogris 6y agoWere you unable to get it to work? Looks like it should work fine with a kernel >= 4.18
- piyush_soni 6y agoMay be a side topic, but I always wonder even after so many decades why does everything on Linux look so ugly?
- diarrhea 6y agoTerminal applications only get you so far. It's the greatest common denominator. Has it been ugly for decades? Probably, some might disagree. But it sure as heck has been stable.
- piyush_soni 6y agoNot sure about the stability part too actually. IT people update kernels on our Linux distributions and it often completely messes up Graphics drivers on that. Surprising, right? There can be two reasons - either our IT people are not competent enough, or Linux flavors that we use have some problems. Then, they sometimes take months to update those graphics drivers because it never works correctly the first few times.
- MayeulC 6y agoSimple enough: you likely use proprietary drivers, which you shouldn't if you want a hassle-free experience. Proprietary drivers are like getting an a third-party accessory like a new set of rearview mirrors for your car. However, you get your cars for free from the manufacturer, and complain when the mirror you bought doesn't fit the new car frame. The ideal answer here is working with the manufacturer to get those issues fixed upstream. Where the comparison with car accesories stop, is that software drivers isn't the core product you are being sold, so there is no real reason for not upstreaming it. Now, onto the real point the comment you are replying to made: the TUI interface has been very stable and good at backwards compatibility for multiple decades. New extensions exist for displaying images, getting mouse coordinates, more colors, etc. But the basic mechanisms have stayed the same, hence stability. Drop a greybeard UNIX tech strakight from the 80s inside a WSL2 environment, and they will be able to do their business as usual. I'm getting better at working with MAC GUIs. Last time I used one (6 years ago), I was able to open a terminal myself to fix the issue the person had with their storage device. Unsure if the GUI changed much since, but I can likely still manage to do so from the CLI.
- reacharavindh 6y agoDon’t we use Sysdig for this? (Watching system call activity on system or by Pid) Is there anything this gives us that sysdig doesn't?
- m0zg 6y agoIn src/common/cancellable_queue.h std::size_t calculateBackpressure() { return currentReadQueue->size() + currentWriteQueue->size(); } Not thread-safe. Shared queues are accessed without a lock. So this will eventually blow up as the queues are swapped in a different thread, or due to inconsistent reads on un-synchronized variables. Recommendation to MS folks: find someone at MS who knows C++. Barring that, at least run ASAN and TSAN on your stuff before you release it.
- otterley 6y agoHave you considered posting an issue on GH? Bug reports like these are unlikely to be seen here by the authors.