Hi all
I tried for a lot of time to get the network and disk usage per process. Resource monitor in windows 7 appear to get these values (netwok and hard drive) , probably it make use of kernel log event ...
I tried to use perfmon.exe , It appear to make use of Windows Performance Counters, but there is counters only for all IO operations
I made a disk filter driver but this slow down my OS. For network I tried winpcap but the same problem, both slow down my OS
Perfmon appear to retrieve a total statistics for all IO operations (Network and Disk). It is a start point : I can get disk usage (in percents using xperf) per process, and from total disk usage I can calculate the number of bytes/received per process, and for network I'll use total - disk_usage ; but there is a problem: I downloaded something big from the internet , total ~700 MB; in this situation I think the total IO bytes need to be ~ 2*700 MB, but in task manager appear something like that:
IO Read bytes ~2000
IO Write bytes ~ 700 000 000
IO Other bytes ~ 200 000 000
In ms documentation IO bytes per second is (network + all IO devices)...
I want to know if perf mon retrieve data using special drivers or make use of performance counters only .
How can I retrieve this info using perfmon.
Many thanks !