ProcDump - A Linux Version Of The ProcDump Sysinternals Tool

• Minimum OS:
  • Red Hat Enterprise Linux / CentOS 7
  • Fedora 26
  • Mageia 6
  • Ubuntu 14.04 LTS
  • We are actively testing against other Linux distributions. If you have requests for specific distros, please let us know (or create a pull request with the necessary changes).
• gdb>= 7.6.1
• zlib (build-time only)

curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg
sudo mv microsoft.gpg /etc/apt/trusted.gpg.d/microsoft.gpg

sudo sh -c 'echo "deb [arch=amd64] https://packages.microsoft.com/repos/microsoft-ubuntu-xenial-prod xenial main" > /etc/apt/sources.list.d/microsoft.list'

sudo sh -c 'echo "deb [arch=amd64] https://packages.microsoft.com/repos/microsoft-ubuntu-trusty-prod trusty main" > /etc/apt/sources.list.d/microsoft.list'

sudo apt-get update
sudo apt-get install procdump

Pre-Depends: dpkg(>=1.17.5)

wget https://packages.microsoft.com/repos/microsoft-ubuntu-xenial-prod/pool/main/p/procdump/procdump_1.0.1_amd64.deb

wget https://packages.microsoft.com/repos/microsoft-ubuntu-trusty-prod/pool/main/p/procdump/procdump_1.0.1_amd64.deb

sudo dpkg -i procdump_1.0.1_amd64.deb
sudo apt-get -f install

sudo apt-get purge procdump

Usage: procdump [OPTIONS...] TARGET
   OPTIONS
      -C          CPU threshold at which to create a dump of the process from 0 to 100 * nCPU
      -c          CPU threshold below which to create a dump of the process from 0 to 100 * nCPU
      -M          Memory commit threshold in MB at which to create a dump
      -m          Trigger when memory commit drops below specified MB value.
      -n          Number of dumps to write before exiting
      -s          Consecutive seconds before dump is written (default is 10)
   TARGET must be exactly one of these:
      -p          pid of the process
      -w          Name of the process executable

The following examples all target a process with pid == 1234

sudo procdump -p 1234

sudo procdump -n 3 -p 1234

sudo procdump -n 3 -s 5 -p 1234

sudo procdump -C 65 -n 3 -p 1234

sudo procdump -C 65 -n 3 -s 5 -p 1234

sudo procdump -c 10 -C 65 -p 1234

sudo procdump -C 65 -M 100 -p 1234

All options can also be used with -w instead of -p. -w will wait for a process with the given name.

sudo procdump -w my_application

• Currently will only run on Linux Kernels version 3.5+
• Does not have full feature parity with Windows version of ProcDump, specifically, stay alive functionality, and custom performance counters