windows 查看进程树 - tlist/tasklist
声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow
原文地址: http://stackoverflow.com/questions/11269165/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Viewing the Process Tree - tlist/tasklist
提问by Yakov
Starting windows xp
the tlist
was changed by the tasklist
.
tlist
has the option \t
,which permitted to query parent/child process relationship
does similar option exist in tasklist
?
Thank you
开始windows xp
的tlist
被改变tasklist
。
tlist
有\t
允许查询父/子进程关系的选项是否存在类似的选项tasklist
?谢谢
采纳答案by Searush
I think you want this:
我想你想要这个:
tasklist /SVC
If this is not helpful then I recommend Process Explorer. It is a program which shows all parent and child processes.
如果这没有帮助,那么我推荐 Process Explorer。它是一个显示所有父进程和子进程的程序。
This is the official link: http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
这是官方链接:http: //technet.microsoft.com/en-us/sysinternals/bb896653.aspx
回答by Adrian Vondra?ek
Also you can tried
你也可以尝试
tasklist /M
It will give you result like that:
它会给你这样的结果:
BESClientUI.exe 4296 ntdll.dll, wow64.dll, wow64win.dll,
wow64cpu.dll
SynTPHelper.exe 2216 N/A
sihost.exe 9340 ntdll.dll, KERNEL32.DLL, KERNELBASE.dll,
msvcrt.dll, combase.dll, ucrtbase.dll,
RPCRT4.dll, bcryptPrimitives.dll,
sechost.dll, advapi32.dll,
CoreMessaging.dll, ntmarta.dll,
Also you can filter it
你也可以过滤它
tasklist /M /FI "xxx"
Where as xxx you can specyfi filter parameters
作为 xxx,您可以指定过滤器参数
Filters:
Filter Name Valid Operators Valid Value(s)
----------- --------------- --------------------------
STATUS eq, ne RUNNING | SUSPENDED
NOT RESPONDING | UNKNOWN
IMAGENAME eq, ne Image name
PID eq, ne, gt, lt, ge, le PID value
SESSION eq, ne, gt, lt, ge, le Session number
SESSIONNAME eq, ne Session name
CPUTIME eq, ne, gt, lt, ge, le CPU time in the format
of hh:mm:ss.
hh - hours,
mm - minutes, ss - seconds
MEMUSAGE eq, ne, gt, lt, ge, le Memory usage in KB
USERNAME eq, ne User name in [domain\]user
format
SERVICES eq, ne Service name
WINDOWTITLE eq, ne Window title
MODULES eq, ne DLL name
for example:
例如:
tasklist /M /FI "IMAGENAME eq explorer.exe"
Which give's you somethin similar:
这给了你类似的东西:
Image Name PID Modules
========================= ======== ============================================
explorer.exe 9912 ntdll.dll, KERNEL32.DLL, KERNELBASE.dll,
msvcrt.dll, combase.dll, ucrtbase.dll,
RPCRT4.dll, bcryptPrimitives.dll,
OLEAUT32.dll, msvcp_win.dll, shcore.dll,
advapi32.dll, sechost.dll, powrprof.dll,
user32.dll, win32u.dll, GDI32.dll,
gdi32full.dll, shlwapi.dll,
windows.storage.dll, kernel.appcore.dll,
profapi.dll, FLTLIB.DLL, SHELL32.dll,
cfgmgr32.dll, TWINAPI.dll, PROPSYS.dll,
winmm.dll, settingsynccore.dll,
UxTheme.dll, dwmapi.dll, SspiCli.dll,
USERENV.dll, twinapi.appcore.dll,
WININET.dll, WTSAPI32.dll,
TextInputFramework.dll, WINMMBASE.dll,
bcrypt.dll, cryptsp.dll, RMCLIENT.dll,
CoreUIComponents.dll, CoreMessaging.dll,
wintypes.dll, ntmarta.dll, IMM32.DLL,