Original author(s)Winternals Software
Stable release
v11.0 (Windows version)
v1.3 (Linux version)[1] / November 3, 2022; 19 months ago (2022-11-03) (Windows version)
November 3, 2022; 19 months ago (2022-11-03) (Linux version)
Written inC
Operating systemMicrosoft Windows, Linux
Available inEnglish
LicenseWindows: Proprietary commercial software
Linux: MIT License

ProcDump is a command-line application used for monitoring an application for CPU spikes and creating crash dumps during a spike.[2][3] The crash dumps can then be used by an administrator or software developer to determine the cause of the spike. ProcDump supports monitoring of hung windows and unhandled exceptions. It can also create dumps based on the values of system performance counters.[4]


Initially, ProcDump was only available for Microsoft Windows. In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.[5] The software is open source. It is licensed under MIT License and the source code is available on GitHub.[6]

The Linux version requires Linux kernels version 3.5+ and runs on Red Hat Enterprise Linux / CentOS 7, Fedora 26, Mageia 6, Ubuntu 14.04 LTS. It currently does not have full feature parity with the Windows version (e.g. custom performance counters).


Create 5 core dumps 10 seconds apart of the target process with process identifier (pid) == 1234

$ sudo procdump -n 5 -p 1234

See also


  1. ^ "microsoft/ProcDump-for-Linux". GitHub. 4 November 2022.
  2. ^ "ProcDump - Monitor CPU/processes - Windows CMD -".
  3. ^ "How to collect memory dumps using ProcDump - Sitecore Knowledge Base".
  4. ^ "Creating Process Dumps with ProcDump | Knowledge Base".
  5. ^ Cimpanu, Catalin (5 November 2018). "Microsoft working on porting Sysinternals to Linux". ZDNet. CBS Interactive. Retrieved 5 November 2018.
  6. ^ "microsoft/ProcDump-for-Linux". November 6, 2020 – via GitHub.