There are many ways to do this, a couple are as follows: There is an app called ProcMon out there which will trap if a particular process goes up or down. I just looked for it and realized that there are ALOT of apps under the same name so it would take some finding.
The best way to do it, which I do not think alot of people know about is using EVNTWIN. 1. Install the snmp service on your win2k/NT device. 2. Go to Start > Run > type "EVNTWIN" - This utility converts Event Log messages to SNMP traps! It is also cool as you can see ALL possible event log messages that could be logged, tracked, and trapped by your server! As far as I know, Mark Minasi does not even know this utility exists. 3. You will want to customize the config following the "HELP" directions. 4. Find the event message that tells you when a process has started and when it has exited. 5. Set it up to trap to WUG, and set WUG to alarm on the trap for the process you want to monitor. Notes: If I remember correctly you need to set up the event log auditing so the event you want will show up in the event logs and thus will be trapped. (This particular event CAN fill up your logs a bit so check it both ways. Make sure snmp service is set up to trap with all needed info. This will tell you if the process is no longer running, i.e. if it has exited memory properly (or entered memory) I do not believe it will tell you if the process is hung. HTH P.S. Another one I found is pretty neat but not related to your problem, at the command line type: pathping [[EMAIL PROTECTED]] or pathping /? for other options. James McGovern Amann Network Technician Lead Georgia State University IST / UCCS 95 Decatur St. Suite 500 Atlanta, GA 30303 PH: 404.651.1574 FX: 404.651.4408 PG: 404.476.7754 [EMAIL PROTECTED] >>> [EMAIL PROTECTED] 01/02/03 17:03 PM >>> Can WUG monitor NT/2000 processes? I know it can monitor services, but I was wondering about processes. Thanks DaVita Inc. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
