Does Get-Counter to remote computers use WMI or CIM under the covers?

This topic contains 1 reply, has 2 voices, and was last updated by Profile photo of Daniel Krebs Daniel Krebs 11 months, 3 weeks ago.

  • Author
  • #31779
    Profile photo of Cody Konior
    Cody Konior

    If I'm going to be using Get-Counter a lot I'd like to know if it's using the heavyweight WMI or lightweight CIM under the covers.

    If we don't know is it possible to work it out through monitoring the remote end and looking for something in particular? (I'm not sure how to do this but if there are ideas to get me started I can give it a shot; for example I'm not sure how the Wireshark trace would look, but if nobody knows I could try WMI and CIM queries to see if I can find the difference and then try Get-Counter).

    And if it turned out it still uses WMI, does anyone have any pointers on how to roll a CIM equivalent version to read performance counters? I imagine that would be cool seeing as you can open the connection once and re-use it over and over. I'm just not sure which classes you'd target.

  • #31780
    Profile photo of Daniel Krebs
    Daniel Krebs

    Hi Cody,

    Get-Counter is wrapping the Windows Performance Counter functions which are using Remote Procedure Calls (RPC) instead of WIM or CIM.


You must be logged in to reply to this topic.