1.释义
查看进程打开的文件、目录,还可以查看进程监听的端口等socket相关的信息
2.系统帮助
lsof: illegal option character: -
lsof: -e not followed by a file system path: "lp"
lsof 4.87
latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/
latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ
latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man
usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-f[gG]] [+|-e s]
[-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]
[+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]
Defaults in parentheses; comma-separated set (s) items; dash-separated ranges.
-?|-h list help -a AND selections (OR) -b avoid kernel blocks
-c c cmd c ^c /c/[bix] +c w COMMAND width (9) +d s dir s files
-d s select by FD set +D D dir D tree *SLOW?* +|-e s exempt s *RISKY*
-i select IPv[46] files -K list tasKs (threads) -l list UID numbers
-n no host names -N select NFS files -o list file offset
-O no overhead *RISKY* -P no port names -R list paRent PID
-s list file size -t terse listing -T disable TCP/TPI info
-U select Unix socket -v list version info -V verbose search
+|-w Warnings (+) -X skip TCP&UDP* files -Z Z context [Z]
-- end option scan
+f|-f +filesystem or -file names +|-f[gG] flaGs
-F [f] select fields; -F? for help
+|-L [l] list (+) suppress (-) link counts < l (0 = all; default = 0)
+m [m] use|create mount supplement
+|-M portMap registration (-) -o o o 0t offset digits (8)
-p s exclude(^)|select PIDs -S [t] t second stat timeout (15)
-T qs TCP/TPI Q,St (s) info
-g [s] exclude(^)|select and print process group IDs
-i i select by IPv[46] address: [46][proto][@host|addr][:svc_list|port_list]
+|-r [t[m]] repeat every t seconds (15); + until no files, - forever.
An optional suffix to t is m; m must separate t from and
is an strftime(3) format for the marker line.
-s p:s exclude(^)|select protocol (p = TCP|UDP) states by name(s).
-u s exclude(^)|select login|UID set s
-x [fl] cross over +d|+D File systems or symbolic Links
names select named files or files on named file systems
Anyone can list all files; /dev warnings disabled; kernel ID check disabled.
-a 指示其它选项之间为与的关系
-c 输出指定进程所打开的文件
-d 列出占用该文件号的进程
+d 输出目录及目录下被打开的文件和目录(不递归)
+D 递归输出及目录下被打开的文件和目录
-i 输出符合条件与网络相关的文件
-n 不解析主机名
-p 输出指定 PID 的进程所打开的文件
-P 不解析端口号
-t 只输出 PID
-u 输出指定用户打开的文件
-U 输出打开的 UNIX domain socket 文件
-h 显示帮助信息
-v 显示版本信息
3.示例
3.1.查看端口连接信息
[root@ home]#lsof -i :22
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
sshd 4300 root 3u IPv4 771312 0t0 TCP :ssh->172.20.3.63:62590 (ESTABLISHED)
sshd 4376 root 3u IPv4 772558 0t0 TCP :ssh->172.20.3.63:57989 (ESTABLISHED)
sshd 4395 root 3u IPv4 771330 0t0 TCP :ssh->172.20.3.63:57999 (ESTABLISHED)
sshd 5334 root 3u IPv4 33110 0t0 TCP *:ssh (LISTEN)
sshd 5334 root 4u IPv6 33119 0t0 TCP *:ssh (LISTEN)
sshd 8442 root 3u IPv4 1305231 0t0 TCP :ssh->172.20.3.63:65236 (ESTABLISHED)
IT博客站版权所有丨如未注明 , 均为原创丨本网站采用BY-NC-SA协议进行授权
转载请注明原文链接:lsof命令查看进程socket相关信息
如果觉得《lsof查看进程占用文件_lsof命令查看进程socket相关信息》对你有帮助,请点赞、收藏,并留下你的观点哦!