nmon como alternativa Linux ao Process Monitor
Atualizado em
Nossa avaliação
nmon is not a direct replacement for Process Monitor because it lacks real-time file, registry, and system call tracing. It is a performance monitoring tool, not a forensic debugger. If your goal is to debug why a specific file failed to open or track registry changes, nmon will fail. However, if you need to monitor overall system health, CPU, memory, and disk I/O per process in real-time, nmon is excellent. It is lightweight and scriptable, making it ideal for sysadmins checking resource usage, but useless for application-level debugging tasks that Process Monitor handles.
- Licença
- GPL-2.0
- Preço
- Grátis
- Versão mais recente
- 16s
- Avaliação
- —
O que funciona igual
- Real-time monitoring of system activity
- Process-level tracking and statistics
- Ability to export data for later analysis
- Low overhead during live monitoring
- Filtering capabilities for specific processes
O que muda
- No real-time file system access logging (open/read/write events)
- No registry or configuration file change tracking
- No system call tracing capabilities
- Focuses on aggregate metrics (CPU, RAM, Disk) rather than individual event streams
- Console-based interface instead of GUI with detailed event lists
Abrindo seus arquivos do Process Monitor
nmon does not open or export Process Monitor (.PML) files. It generates its own CSV or JSON logs. You cannot import Process Monitor data into nmon, nor can you export nmon data in a format that Process Monitor can read. If you have existing Process Monitor logs, you must analyze them on Windows or use a script to parse the PML file separately, as there is no native interoperability between these two distinct tools.
Trocando o Process Monitor pelo nmon, passo a passo
- Install nmon via your package manager (e.g., apt install nmon)
- Run nmon in interactive mode to monitor overall system health
- Use the 'p' key to view process-specific CPU and memory usage
- Configure logging to CSV for long-term performance analysis
- For file-level debugging, switch to strace or inotifywait instead of nmon
Principais recursos do nmon
- Estatísticas em tempo real de CPU, memória, disco, rede e processos
- Taxa de atualização configurável
- Suporte para registro em CSV para análise posterior
- Exibe I/O por dispositivo e por processo
- Atalhos de teclado para navegação
- Pode ser executado como um daemon em segundo plano
- Suporta múltiplos formatos de saída (CSV, JSON)
Como instalar o nmon no Linux
sudo apt install nmonsudo apt install nmonsudo dnf install nmonsudo pacman -S nmonsudo zypper install nmonPerguntas frequentes
Can nmon show which process opened a specific file?
No. nmon shows disk I/O per process but not individual file open events. Use lsof or inotifywait for that.
Is nmon suitable for forensic analysis of malware?
No. It lacks the event-level granularity needed for forensics. Use strace, auditd, or sysdig for tracking malicious behavior.
Does nmon have a graphical interface?
No, it is a console application. There are third-party web dashboards for nmon data, but the core tool is text-based.