nmon, alternative Linux à Process Monitor
Mis à jour le
Notre avis
nmon is not a direct replacement for Process Monitor because it lacks real-time file, registry, and system call tracing. It is a performance monitoring tool, not a forensic debugger. If your goal is to debug why a specific file failed to open or track registry changes, nmon will fail. However, if you need to monitor overall system health, CPU, memory, and disk I/O per process in real-time, nmon is excellent. It is lightweight and scriptable, making it ideal for sysadmins checking resource usage, but useless for application-level debugging tasks that Process Monitor handles.
- Licence
- GPL-2.0
- Prix
- Gratuit
- Dernière version
- 16s
- Note
- —
Ce qui fonctionne pareil
- Real-time monitoring of system activity
- Process-level tracking and statistics
- Ability to export data for later analysis
- Low overhead during live monitoring
- Filtering capabilities for specific processes
Ce qui change
- No real-time file system access logging (open/read/write events)
- No registry or configuration file change tracking
- No system call tracing capabilities
- Focuses on aggregate metrics (CPU, RAM, Disk) rather than individual event streams
- Console-based interface instead of GUI with detailed event lists
Ouvrir vos fichiers Process Monitor
nmon does not open or export Process Monitor (.PML) files. It generates its own CSV or JSON logs. You cannot import Process Monitor data into nmon, nor can you export nmon data in a format that Process Monitor can read. If you have existing Process Monitor logs, you must analyze them on Windows or use a script to parse the PML file separately, as there is no native interoperability between these two distinct tools.
Passer de Process Monitor à nmon, étape par étape
- Install nmon via your package manager (e.g., apt install nmon)
- Run nmon in interactive mode to monitor overall system health
- Use the 'p' key to view process-specific CPU and memory usage
- Configure logging to CSV for long-term performance analysis
- For file-level debugging, switch to strace or inotifywait instead of nmon
Fonctionnalités clés de nmon
- Statistiques en temps réel du CPU, de la mémoire, du disque, du réseau et des processus
- Taux de rafraîchissement configurable
- Prise en charge de la journalisation au format CSV pour l’analyse post‑hoc
- Affichage I/O par dispositif et par processus
- Raccourcis clavier pour la navigation
- Peut s’exécuter en tant que démon en arrière‑plan
- Prise en charge de plusieurs formats de sortie (CSV, JSON)
Installer nmon sous Linux
sudo apt install nmonsudo apt install nmonsudo dnf install nmonsudo pacman -S nmonsudo zypper install nmonQuestions fréquentes
Can nmon show which process opened a specific file?
No. nmon shows disk I/O per process but not individual file open events. Use lsof or inotifywait for that.
Is nmon suitable for forensic analysis of malware?
No. It lacks the event-level granularity needed for forensics. Use strace, auditd, or sysdig for tracking malicious behavior.
Does nmon have a graphical interface?
No, it is a console application. There are third-party web dashboards for nmon data, but the core tool is text-based.