Users Guide
Interacting with the Cartridge for Guest Process Investigation 57
Process Information Data Sources
Linux
For process information on a Linux machine, data exposed by remotely executing the
PS Command is used. The following explains what data is used to provide process
information.
Process Name
The PS Command Output from requesting the "comm" field is used as the process
name. This contains the executable name only. No command line modifications are
included.
Process ID (PID)
The PS Command Output from requesting the "pid" field is used as the Process ID or
PID.
Parent Process ID (PPID)
The PS Command Output from requesting the "ppid" field is used as the Parent Process
ID or PPID.
Processor Utilization (%)
The CPU utilization of this process is obtained by a calculation involving the PS
Command Output from requesting the "cputime" and "etime" fields. The calculation
involves taking two samples of data. The process CPU utilization will only be available
after a second sample is taken.
Total Processor Time
The PS Command Output from requesting the field "cputime" is used as the amount of
time the process has consumed the CPU.
Memory Utilization
The PS Command Output from requesting the field "%mem" is used as the percentage
of physical system memory being consumed by the process.










