Look into using WMI. It has an event sink that let's you provide an SQL-like
query to monitor for particular events. There are several good books out
there on WMI and my 2nd Perl book covers how to access WMI using Perl's
Win32::OLE extension (http://www.roth.net/books/handbook/).
Roth Consulting Check out my monthly Perl column:
Win32 Perl Programming: The Standard Extensions, 2nd edition
Win32 Perl Scripting: The Administrator's Handbook
> I am trying to monitor processes (not services) on Win2k and/or WinNT. I
> need to generate a notification, (prefferably a trap) when and if a
> fails or is started.
> I have tried using procmon (http://www.ncomtech.com/download.htm)
> but it simply does not work.
> If anyone has tamed this beast please let me know. Thanks.
> James Amann