lsof

https://lsof.readthedocs.io

Admin

lsof is a command-line utility that lists open files and provides information about processes,...

Tokens:564

Snippets:11

Trust Score:9.6

Update:5 months ago

Show doc for...

Tokens:

Raw

### Find files open to a named command with lsof

Source: https://lsof.readthedocs.io

List files opened by processes associated with a specific command name. Replace 'bash' with the command you want to query.

```bash
lsof -c bash
```

--------------------------------

### Find files open by a specific user with lsof

Source: https://lsof.readthedocs.io

Display all files opened by processes belonging to a particular user. Replace 'somebody' with the username.

```bash
lsof -u somebody
```

--------------------------------

### Find uses of a specific open file with lsof

Source: https://lsof.readthedocs.io

Use this command to identify which processes have a specific file open. Replace '/path/to/file' with the actual file path.

```bash
lsof /path/to/file
```

--------------------------------

### Find processes blocking umount with lsof

Source: https://lsof.readthedocs.io

Use this command to identify processes that are preventing a file system from being unmounted. Replace '/mnt' with the mount point of the file system.

```bash
lsof /mnt
```

--------------------------------

### Find files open to a process with known PID using lsof

Source: https://lsof.readthedocs.io

Specify the process ID (PID) to list all files opened by that specific process. Replace '1234' with the actual PID.

```bash
lsof -p 1234
```

--------------------------------

### Find TCP/UDP sockets with lsof

Source: https://lsof.readthedocs.io

This command lists all active TCP and UDP network sockets. It's useful for network troubleshooting and monitoring.

```bash
lsof -i
```

--------------------------------

### Find unlinked open files with lsof

Source: https://lsof.readthedocs.io

This command helps find files that have been unlinked (deleted) but are still held open by a process. This is useful for recovering data or identifying processes consuming disk space from deleted files.

```bash
lsof +L1
```

Tokens:

Raw