up vote 1 down vote favorite
share [g+] share [fb]

Can someone point out a tool (or tools) to monitor the access to memory mapped files on Windows systems?

Procmon from Sysinternals/Microsoft is not suitable for the task, apparently. It does not seem to be able to monitor operations that are backed by the paging file itself.

Update: my question is not about the amounts/distribution of various allocation methods. I'm interested in a tool (or tools) that show me accesses (mainly open/create/close) to MMFs.

link|improve this question
89% accept rate
1  
I dunno if RAMMap is suitable for this use (and I'm not in a spot to check myself at the moment) but hey, just throwing it out there. – Shinrai Aug 24 '11 at 19:45
@Shinrai: thanks, but no. It's not. By monitoring I mean similar operations as Procmon monitors, resolved by name of the MMF. – STATUS_ACCESS_DENIED Aug 24 '11 at 19:52
feedback

1 Answer

up vote -1 down vote

This may have already been answered here with sysinternals vmmap. See if it suits your needs.

link|improve this answer
hi, not at all. I'm aware of the API function but I'm looking at a program that is a black box to me, so that would not even help. vmmap is also just showing the amounts certain allocation types make up within the memory space of a process. I want to be able to monitor the access to memory mapped files, not their sizes. I wrote that in my question already, but will amend it. – STATUS_ACCESS_DENIED Aug 25 '11 at 17:39
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.