Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If execute the !process command in the windwos debugger you get output in this format:

PROCESS fffffa8006bff940
    SessionId: 0  Cid: 03ec    Peb: 7f79ae1f000  ParentCid: 02e4
    DirBase: 084ed000  ObjectTable: fffff8a002c3fd80  HandleCount: <Data Not Accessible>
    Image: svchost.exe

It's well documented that Cid is the ProcessId (pid) in hex. However, I don't see what the C stands for.

share|improve this question
up vote 3 down vote accepted

It stands for CLIENT_ID.

From this MSDN blog post (emphasis mine):

Recently someone asked me what was the real meaning of the ‘Cid’ field which appears in the output of commands such as !process and !thread in the kernel debugger (kd). Though from a practical perspective I was aware that these represent the Process ID and Thread ID, I was unsure of what Cid stands for. In course of a search, I found a public source which answers the question. Cid is short for CLIENT_ID which in turn is an undocumented structure.

That posts cites that the original source as Undocumented Windows 2000 Secrets: A Programmer's Cookbook, by Sven B. Schreiber.

share|improve this answer

03ec = 1004 in dec. 'c' is a last hexidecimal digit of that number, it doesn't stand for anything (well, 12dec by itself).

the cid/pid is a 4 digit hex value, not 3.

share|improve this answer
That's not the "c" he's talking about. – ckhan Jan 3 '13 at 7:39
lol, I reread his output a few times, thinking it was an odd question. Misinterpretation on my part. – Solemnity Jan 4 '13 at 0:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .