The function of the Tasklist command is detailed. The

system tutorial is started again. Today, this tutorial brings you the function introduction of the Tasklist command. I hope that the children's shoes that know the system knowledge can be taken a good look today, and if everyone is fine, then Can look at it, after all, it is still useful. The Tasklist command is used to display all processes running on a local or remote computer with multiple execution parameters.

Using Formats

Tasklist [/S system [/U username [/P [password]]]] [/M [module] |  /SVC |  /V] [/FI filter] [/FO format] [/NH]

Parameter Meaning

/S system Specifies the remote system to connect to.

/U [domain]user Specifies which user to use to execute this command.

/P [password] Specifies the password for the specified user.

/M [module] Lists all processes that call the specified DLL module. If no module name is specified, all modules loaded by each process are displayed.

/SVC displays the services in each process.

/V Show details.

/FI filter Displays a series of processes that match the filter specification.

/FO format Specify the output format, valid values: TABLE, LIST, CSV.

/NH Specifies that the column title is not displayed in the output. Only valid for TABLE and CSV formats.

Instances

1. View the native process Enter the Tasklist command in the “command prompt> to display all the processes of the machine (Figure 1). The display result of this unit consists of 5 parts: image name (process name), PID, session name, session #, and memory usage.

2. View the process of the remote system Enter "ldklist /s 218.22.123.26 /u jtdd /p 12345678" (without the quotation marks) at the command prompt to view the IP address of 218.22.233.26. The process of the remote system (Figure 2). The /s parameter after "218.22.123.26" is the IP address of the remote system to be viewed. After /u, "jtdd" refers to the user account used by the Tasklist command. It must be a valid account on the remote system. “12345678” after the /p refers to the password of the jtdd account. Note: When using the Tasklist command to view the process of the remote system, the RPC service support of the remote machine is required. Otherwise, the command cannot be used normally.

3. View the services provided by the system process The Tasklist command can not only view the system process, but also view the services provided by each process. To view the services provided by the native process SVCHOST.EXE, type the “Tasklist /svc” command at the command prompt (Figure 3). You will be surprised to find that there are 4 SVCHOST.EXE processes, and a total of more than twenty services use this process. For remote systems, viewing system services is also very simple. Use the “Tasklist /s 218.22.123.26 /u jtdd /p 12345678 /svc” command to view the services provided by remote system processes with IP address 218.22.123.26. .