ProcMon for Linux

I&#x27;m just waiting for Microsoft to invert WSL into LSW.<p>Specifically, I hope they release their own branded Linux distro, built on Ubuntu&#x2F;Debian, with an optional KVM-hosted NT kernel for Windows syscall support. Maybe call it Windows NC (for Next Century).<p>I&#x27;ll probably leave MacOS behind at that point on my work machine, especially if they create a display-PS compositing window manager that&#x27;s anywhere as good as MacOS&#x27;s.

Does it have telemetry built in?<p><a href="https:&#x2F;&#x2F;github.com&#x2F;microsoft&#x2F;ProcMon-for-Linux&#x2F;search?q=telemetry&amp;unscoped_q=telemetry" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;microsoft&#x2F;ProcMon-for-Linux&#x2F;search?q=tele...</a>

Don’t we use Sysdig for this? (Watching system call activity on system or by Pid)<p>Is there anything this gives us that sysdig doesn&#x27;t?

I am continually impressed with the changes Microsoft has made since Satya Nadella took over :)

Looking forward to the first EEE comment. :)

WSL is becoming more attractive as a development environment by the day. Maybe my next computer in 4-5 years won’t be a Mac.<p>I miss having access to Windows games.

the error log after installing this &quot;tool&quot; pretty much sums it up for me<p>stopping now [-ferror-limit=] 20 errors generated.

Advanced tracing like BPF is amazing and the slow but steady adaption of these tools in one form of another will bring us closer to a sane and comfortable future of transparency and reduced complexity. Glad microsoft is also on the train with WSL.

need root permission. Can we have normal permission ProcMon with less feature?

This is pretty sweet. Hoping someone makes an Arch AUR package for it

Neat, I already use fatrace on Linux but hurray for more tools.

In src&#x2F;common&#x2F;cancellable_queue.h<p><pre><code> std::size_t calculateBackpressure() { return currentReadQueue-&gt;size() + currentWriteQueue-&gt;size(); } </code></pre> Not thread-safe. Shared queues are accessed without a lock. So this will eventually blow up as the queues are swapped in a different thread, or due to inconsistent reads on un-synchronized variables.<p>Recommendation to MS folks: find someone at MS who knows C++. Barring that, at least run ASAN and TSAN on your stuff before you release it.

I’ll laugh when they get to the third e. It’s the same tricks that they’ve played before, but everyone is too young to remember it on their own skin and the older ones who remember are ridiculed. They’re moving just like the frog stays comfortable in the slowly boiling pot, with a slow and steady embrace. Their target audience is unsuspecting as if Microsoft has become some kind of altruistic force. But no monster of that size is altruistic, they’re hungry for fresh souls:) And they’ll have ‘em it seems. It won’t hurt, the denial will mitigate the pain.

this headline is absolutely misleading and a lie - the tool does in fact not run on linux

Umm... wut?!

May be a side topic, but I always wonder even after so many decades why does everything on Linux look so ugly?

Fantastic. This is going to completely overhaul how anomaly detection engineering is done in Linux.

This seems to use eBPF. As far as I know, WSL2 doesn&#x27;t support eBPF. I don&#x27;t understand how this can be seen as the <i>Extend</i> part of EEE. People really need to calm down.