现在每次我可以抓下内存的情况保存到日志，但是就没有进程-连接（对方ip端口-收发字节数）信息
####13:40:11.86
AvailableBytes=9636487168
AvailableKBytes=9410632
AvailableMBytes=9190
CacheBytes=162811904
CacheBytesPeak=190484480
CacheFaultsPersec=0
Caption=
CommitLimit=17028755456
CommittedBytes=7333068800
DemandZeroFaultsPersec=103962
Description=
FreeSystemPageTableEntries=158265
Frequency_Object=
Frequency_PerfTime=
Frequency_Sys100NS=
Name=
PageFaultsPersec=103962
PageReadsPersec=0
PagesInputPersec=0
PagesOutputPersec=0
PagesPersec=0
PageWritesPersec=0
PercentCommittedBytesInUse=43
PoolNonpagedAllocs=99332
PoolNonpagedBytes=55070720
PoolPagedAllocs=94476
PoolPagedBytes=56635392
PoolPagedResidentBytes=53899264
SystemCacheResidentBytes=106254336
SystemCodeResidentBytes=0
SystemCodeTotalBytes=1327104
SystemDriverResidentBytes=2658304
SystemDriverTotalBytes=2351104
Timestamp_Object=
Timestamp_PerfTime=
Timestamp_Sys100NS=
TransitionFaultsPersec=0
TransitionPagesRePurposedPersec=0
WriteCopiesPersec=0
Process information for xxxx:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed Time
Idle 0 0 16 0 0 1119:53:58.328 0:00:00.000
System 4 8 131 2704 0 0:06:16.531 0:00:00.000
smss 320 11 2 26 128 0:00:00.015 70:12:36.165
csrss 368 13 16 881 3716 0:01:14.218 70:12:35.180
winlogon 392 13 20 632 10284 0:00:02.093 70:12:33.977
services 440 9 17 404 6732 0:00:03.265 70:12:33.712
lsass 452 9 33 809 26352 0:01:50.671 70:12:33.696
svchost 632 8 5 125 952 0:00:00.062 70:12:33.477
svchost 696 8 12 307 1656 0:00:28.984 70:12:32.774
svchost 760 8 9 158 4152 0:00:00.453 70:12:32.743
svchost 776 8 13 197 3184 0:00:00.062 70:12:32.727
spoolsv 1000 8 13 206 5128 0:00:00.968 70:11:23.571
msdtc 1024 8 15 204 1852 0:00:00.015 70:11:23.571
svchost 1164 8 2 103 612 0:00:00.015 70:11:22.930
inetinfo 1332 8 22 426 7516 0:00:24.703 70:11:22.915
MsDtsSrvr 1368 8 22 269 32700 0:00:00.312 70:11:22.915
msftesql 1652 8 6 436 4424 0:00:00.031 70:11:22.602
sqlservr 1680 8 118 834 138532 1:29:16.015 70:11:22.587
svchost 1772 8 2 73 284 0:00:00.000 70:11:22.540
svchost 1892 8 28 217 15376 0:00:00.453 70:11:22.524
SQLAGENT90 2612 8 12 385 8648 0:00:00.265 70:11:17.712
svchost 2660 8 25 258 2988 0:00:14.906 70:11:17.665
csrss 2860 13 9 87 1280 0:00:00.640 69:57:12.634
winlogon 2668 13 9 184 2228 0:00:00.250 69:57:12.571
rdpclip 1052 8 3 112 1048 0:00:00.000 69:57:11.149
explorer 688 8 14 490 19316 0:01:16.312 69:57:11.009
conime 2960 8 1 81 492 0:00:00.031 69:57:10.899
ctfmon 3400 8 1 156 884 0:00:00.750 69:57:10.790
taskmgr 1144 13 3 130 2600 0:01:10.078 69:57:00.727
TOTALCMD 2312 8 4 206 18312 0:00:36.453 69:56:47.743
logon.scr 4480 4 1 24 464 0:00:00.078 69:06:02.143
svchost 4180 8 43 997 14584 0:01:14.406 68:58:59.760
wmiprvse 4456 8 4 194 1840 0:00:00.125 68:58:59.120
svchost 4888 8 29 275 3232 0:00:00.031 68:39:26.272
cmd 4996 8 1 36 1604 0:00:01.609 68:35:22.534
mmc 896 8 6 327 9580 0:00:11.203 68:16:04.887
mmc 724 8 11 354 9856 0:00:01.515 68:15:42.325
mmc 1816 8 4 291 9684 0:00:01.218 51:18:22.783
cmd 4164 8 1 33 1544 0:00:00.000 28:11:06.460
mmc 5060 8 3 213 8220 0:00:00.500 20:11:17.458
wmiprvse 784 8 7 750 2104 0:00:01.750 4:44:45.417
WinTail 4332 8 1 96 14800 0:03:58.109 3:24:51.187
cmd 3484 8 1 33 1524 0:00:00.000 2:40:57.424
w3wp 3312 8 55 662 34852 0:00:03.468 0:45:14.826
w3wp 4336 8 66 692 67452 0:00:01.031 0:24:49.465
w3wp 4324 8 32 246 14196 0:00:00.796 0:18:41.272
pslist 2164 13 1 139 1060 0:00:00.015 0:00:00.000
Process memory detail for xxxx:

Name Pid VM WS Priv Priv Pk Faults NonP Page
Idle 0 0 28 0 0 0 0 0
System 4 2064 296 0 0 7627 0 0
smss 320 3672 472 128 168 231 0 6
csrss 368 79524 2492 3716 13516 268180 6 160
winlogon 392 67140 7240 10284 12780 16964 52 112
services 440 60688 8600 6732 12076 49671 11 57
lsass 452 105080 28044 26352 27284 155946 25 90
svchost 632 24968 3308 952 1024 991 2 46
svchost 696 28088 4440 1656 1720 2824 21 50
svchost 760 57144 5184 4152 4500 7295 8 67
svchost 776 28968 5500 3184 3256 2014 6 47
spoolsv 1000 47520 8232 5128 5520 18215 6 75
msdtc 1024 26280 4536 1852 1900 1243 5 41
svchost 1164 20932 2280 612 636 615 2 40
inetinfo 1332 75672 12920 7516 9672 49701 37 101
MsDtsSrvr 1368 495260 14208 32700 34776 4131 7 140
msftesql 1652 32508 4940 4424 4544 1248 2 51
sqlservr 1680 1771732 92792 138532 179140 2529614 683 178
svchost 1772 7844 1340 284 308 383 1 16
svchost 1892 67660 18144 15376 17488 41136 7 50
SQLAGENT90 2612 115576 4676 8648 9276 5640 10 114
svchost 2660 64028 5452 2988 23500 5435 6 67
csrss 2860 64696 4456 1280 1340 1781 3 124
winlogon 2668 36024 5920 2228 2304 1812 4 62
rdpclip 1052 34952 4100 1048 1080 1402 2 65
explorer 688 98320 11564 19316 21416 469336 11 142
conime 2960 17624 2776 492 496 854 1 33
ctfmon 3400 28476 4028 884 920 3334 4 56
taskmgr 1144 35616 1940 2600 2652 76570 3 65
TOTALCMD 2312 93740 16120 18312 22168 93164 8 178
logon.scr 4480 15880 1852 464 464 461 1 31
svchost 4180 121180 21916 14584 27272 906317 34 147
wmiprvse 4456 32360 5276 1840 2504 7364 3 54
svchost 4888 38868 4320 3232 3304 1173 9 59
cmd 4996 15192 892 1604 1624 58239 1 29
mmc 896 90504 3908 9580 11388 11730 11 130
mmc 724 94484 4684 9856 11248 7297 9 124
mmc 1816 91332 2220 9684 11036 16721 10 127
cmd 4164 15184 88 1544 1572 835 1 29
mmc 5060 74476 2436 8220 8492 5377 7 106
wmiprvse 784 33356 5256 2104 2736 30049 4 62
WinTail 4332 47348 18076 14800 33864 291150 2 60
cmd 3484 15184 1772 1524 1572 478 1 29
w3wp 3312 175848 43572 34852 39472 34360 26 126
w3wp 4336 632772 74320 67452 67516 21374 21 381
w3wp 4324 85284 17780 14196 14416 11688 15 72
pslist 5044 28540 2756 1060 1084 814 2 49