Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to hunt down a rogue process that is locking a file in a specific directory which is preventing a log being appended to. This locking happens about one to three times a week, so needless to say I want ProcMon to run for a long time unattended.

Unfortunately, about once an hour ProcMon will start steadily increasing it's memory usage past 2 gb. At this point I do a "Clear Display" and the memory used goes back to ~200 mb.

I have "Drop Filtered Events" turned on.
I have a backing file set to a file on my desktop (which oddly enough never changes from 4mb).
I have the filtering set so that it includes only processes hitting that directory.
I also exclude the 3 processes that should be accessing that directory.

As a side note, when going into the "Process Monitor Backing Files" dialog, this is displayed:

ProcMon load: 100.0% @ p-1717994043 (2,210,277,644...

share|improve this question

Drop Filtered Events only filters them... They are still collected...

...However, 2 GB is an awful lot, on my machine, it takes around 5MB of memory. Are you sure you are looking at the correct statistic?

Process Monitor collects a hell of a lot of information every second, and it does store lots of data in the pagefile... if this is low, it may be using your memory.

Unfortunately, I do not think there is anything you can do about this apart from increasing the size of your pagefile.

share|improve this answer
I'm pretty sure I'm looking at the correct statistic considering how quick my Free Physical Memory goes down in Task Manager when the spike starts. I mentioned above that I am not backing using the page file. I imagine that means the pagefile usage would be minimal. – ddechant Jun 29 '11 at 21:51
I didn't understand that part... I have never done that and it is most likely the cause... – William Hilsum Jun 29 '11 at 22:13
Thing is, it does it regardless of my backing file setting. – ddechant Jun 30 '11 at 16:04
How big is your pagefile? – William Hilsum Jun 30 '11 at 16:59
The file itself is at 17gb. Task Manager reports using 1.6gb / 24.9gb – ddechant Jun 30 '11 at 17:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.