Any way to monitor command line session?

[Wolfteeth]

I launched DOS Command Prompt, and run robocopy.exe command manaully or run via batch file.

Is there anyway that can monitor the process when it triggers? and then get back the Process ID and ParentProcess ID?

in above scenario, the Process ID should be the PID of Robocopy.exe and the Parent Process ID should be PID of the CMD.exe.

when I using ProcessExists func, it always get nothing, because of robocopy.exe has done its job so that there's no session on Process List already.

what exactly I want is: a small monitor tool is ran on system and it silently monitor the system and no matter any program invoke robocopy.exe at backend, it will trigger alerts to get back its process ID and Parent Process ID for further actions. it looks we need OnEvent handling or API Hook? anyone have good idea?

[FrancescoDiMuro]

Good morning @Wolfteeth
What about:

- ShellExecute()
  Return Value
  Success: the PID of the process that was launched. Or -1 if there was no PID available. 

- Run()
  Return Value
  Success: the PID of the process that was launched.

Best Regards.

[Wolfteeth]

19 minutes ago, FrancescoDiMuro said:

Good morning @Wolfteeth
What about:

- ShellExecute()
  Return Value
  Success: the PID of the process that was launched. Or -1 if there was no PID available. 

- Run()
  Return Value
  Success: the PID of the process that was launched.

Best Regards.

Not right one, as the cmd and robocopy not run from autoit script. it was triggered by user manually or other programs. instead, I want to use AutoIt script to monitor the process created by others.

[FrancescoDiMuro]

@Wolfteeth
Running a program created with AutoIt in the same batch file when you launch robocopy.exe, in which you have some functions like ProcessList() or ProcessExists(), and  save the list of processes? What is the result?

Best Regards.
 

[water]

@Wolfteeth when responding, please just hit reply rather than quoting everything everyone says: it pads the thread needlessly. We know what we typed; we were there when we typed it

[orbs]

2 hours ago, Wolfteeth said:

a small monitor tool is ran on system and it silently monitor the system and no matter any program invoke robocopy.exe at backend, it will trigger alerts to get back its process ID and Parent Process ID for further actions.

sounds like a perfect pseudo-code to me. why won't you go programming it now? use a basic loop with minor Sleep(100), check the processes list with ProcessList("robocopy.exe"), for each entry found, get the parent process ID with _WinAPI_GetParentProcess(). not too hard me thinks.

[mLipok]

Did you check documentation for:

StdoutRead()

?

[Wolfteeth]

@orbs, I am worry about the system performance as while sleep(100) would consume more resource and CPU time. 

 

@others, again, the robocopy.exe is launched by other tool, I want to mointor the Robocopy.exe process and suspend the process and its Parent Process (CMD.exe).  To read the outputs is too later for me

[orbs]

11 minutes ago, Wolfteeth said:

I am worry about the system performance

this is a legitimate concern. however, when you get to actually implement it, you'll notice the performance penalty is minor. and considering that robocopy takes more than a few seconds to complete, you can safely increase the sleep time - even up to 500ms (which practically has zero performance penalty).

as much as i sympathize with your will to utilize a system hook, you'll find it a lot more complicated to implement (if possible at all), and without any real added value.