Linux命令之lsof

lsof [选项] [文件]

lsof命令用于查看你进程打开的文件，进程打开的端口（TCP、UDP），找回/恢复删除的文件，打开文件的进程。

(1).常用选项

?

1 2 3 4 5 6

-c <进程名> 列出指定进程所打开的文件 +D <目录> 递归列出目录下被打开的文件 -i <条件> 列出符号条件的进程（4、6、协议、：端口、@ip） -n <目录> 列出使用NFS的文件 -p <进程号> 列出指定进程号所打开的文件 -u s 列出login name或UID为s的程序

(2).实例

1)在没有任何参数时，显示当前系统已经打开的正在使用的所有文件

?

1 2 3 4 5 6 7 8 9 10 11 12

[xf@xuexi ~]$ lsof | more -10 COMMAND     PID   TID           USER   FD      TYPE             DEVICE  SIZE/OFF     NODE NAME systemd       1                 root  cwd   unknown                                       /proc/1/cwd (readlink: Permission denied) systemd       1                 root  rtd   unknown                                       /proc/1/root (readlink: Permission denied) systemd       1                 root  txt   unknown                                       /proc/1/exe (readlink: Permission denied) systemd       1                 root NOFD                                                 /proc/1/fd (opendir: Permission denied) kthreadd      2                 root  cwd   unknown                                       /proc/2/cwd (readlink: Permission denied) kthreadd      2                 root  rtd   unknown                                       /proc/2/root (readlink: Permission denied) kthreadd      2                 root  txt   unknown                                       /proc/2/exe (readlink: Permission denied) kthreadd      2                 root NOFD                                                 /proc/2/fd (opendir: Permission denied) ksoftirqd     3                 root  cwd   unknown                                       /proc/3/cwd (readlink: Permission denied) --More--

1.名称详解

　COMMAND：进程名称

　PID：进程标识符

　TID：线程ID

　USER：所有者

　FD：文件描述符

　TYPE：文件类型

　DEVICE：磁盘名称

　SIZE/OFF：文件大小

　NODE：索引节点

　NAME：文件名称

2.FD（文件描述符）详解

　cwd：应用程序的当前工作目录，这是该应用程序启动的目录，除非它本身对这个目录进行修改

　txt：该类型的文件是程序代码，如应用程序二进制文件本身或共享库

　rtd：根目录

　0：表示标准输出

　1：表示标准输入

　2：表示标准错误

3.文件类型详解

　DIR：目录

　CHR：字符类型

　BLK：块设备类型

　UNIX：UNIX域套接字

　FIFO：先进先出（FIFO）队列

　IPv4：国际协议（IP）套接字

2）查看指定文件相关的进程信息，即找出此文件的进程

?

1 2 3 4 5

[xf@xuexi ~]$ lsof /bin/bash COMMAND   PID USER  FD   TYPE DEVICE SIZE/OFF     NODE NAME bash    14073   xf txt    REG    8,3   964608 50350934 /usr/bin/bash bash    14119   xf txt    REG    8,3   964608 50350934 /usr/bin/bash bash    14870   xf txt    REG    8,3   964608 50350934 /usr/bin/bash

3）递归查询某个目录的文件信息

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

[xf@xuexi ~]$ lsof +D .local/share/ COMMAND    PID USER   FD   TYPE DEVICE SIZE/OFF     NODE NAME gnome-she 8480   xf  mem    REG    8,3    32768 52016764 .local/share/gvfs-metadata/root-ce6a002c.log gnome-she 8480   xf  mem    REG    8,3       64 52016740 .local/share/gvfs-metadata/root gnome-she 8480   xf   27r   REG    8,3       64 52016740 .local/share/gvfs-metadata/root gnome-she 8480   xf   33r   REG    8,3    32768 52016764 .local/share/gvfs-metadata/root-ce6a002c.log nautilus- 8764   xf  mem    REG    8,3    32768 52016193 .local/share/gvfs-metadata/home-c8370b51.log nautilus- 8764   xf  mem    REG    8,3      528 52016339 .local/share/gvfs-metadata/home nautilus- 8764   xf   16r   REG    8,3      528 52016339 .local/share/gvfs-metadata/home nautilus- 8764   xf   17r   REG    8,3    32768 52016193 .local/share/gvfs-metadata/home-c8370b51.log gnome-sof 8814   xf   27r   DIR    8,3       89 52015751 .local/share/flatpak/repo gnome-sof 8814   xf   28r   DIR    8,3        6   843301 .local/share/flatpak/repo/objects gnome-sof 8814   xf   29r   DIR    8,3       19 17315607 .local/share/flatpak/repo/tmp gnome-sof 8814   xf   30r   DIR    8,3        6 52015800 .local/share/flatpak/repo/tmp/cache tracker-s 8875   xf   12w   REG    8,3   284395 35774061 .local/share/tracker/data/tracker-store.journal evolution 8911   xf   11u   REG    8,3    24576    35380 .local/share/evolution/addressbook/system/contacts.db gvfsd-met 9829   xf  mem    REG    8,3    32768 52016764 .local/share/gvfs-metadata/root-ce6a002c.log gvfsd-met 9829   xf  mem    REG    8,3       64 52016740 .local/share/gvfs-metadata/root gvfsd-met 9829   xf    8r   REG    8,3       64 52016740 .local/share/gvfs-metadata/root gvfsd-met 9829   xf    9u   REG    8,3    32768 52016764 .local/share/gvfs-metadata/root-ce6a002c.log

4）不使用+D选项得到与某个文件有关的进程信息的方法

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143

[xf@xuexi ~]$ lsof | grep '/home/xf/.local/share' gnome-she  8480                   xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log gnome-she  8480                   xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ gnome-she  8480                   xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) gnome-she  8480                   xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) gmain      8480  8482             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log gmain      8480  8482             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ gmain      8480  8482             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) gmain      8480  8482             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) dconf      8480  8483             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log dconf      8480  8483             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ dconf      8480  8483             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) dconf      8480  8483             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) gdbus      8480  8485             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log gdbus      8480  8485             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ gdbus      8480  8485             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) gdbus      8480  8485             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8490             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8490             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8490             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8490             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8491             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8491             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8491             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8491             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8492             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8492             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8492             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8492             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8493             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8493             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8493             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8493             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) threaded-  8480  8509             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log threaded-  8480  8509             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ threaded-  8480  8509             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) threaded-  8480  8509             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8510             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8510             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8510             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8510             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8511             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8511             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8511             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8511             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8512             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8512             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8512             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8512             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8513             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8513             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8513             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8513             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8514             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8514             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8514             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8514             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8515             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8515             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8515             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8515             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8516             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8516             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8516             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8516             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) JS         8480  8517             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log JS         8480  8517             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ JS         8480  8517             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) JS         8480  8517             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8521             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8521             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8521             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8521             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8522             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8522             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8522             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8522             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8523             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8523             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8523             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8523             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) llvmpipe-  8480  8524             xf  DEL       REG                8,3           52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log llvmpipe-  8480  8524             xf  DEL       REG                8,3           52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ llvmpipe-  8480  8524             xf   27r      REG                8,3        64 52016740 /home/xf/.local/share/gvfs-metadata/root.DN12WZ (deleted) llvmpipe-  8480  8524             xf   33r      REG                8,3     32768 52016764 /home/xf/.local/share/gvfs-metadata/root-ce6a002c.log (deleted) nautilus-  8764                   xf  mem       REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log nautilus-  8764                   xf  mem       REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home nautilus-  8764                   xf   16r      REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home nautilus-  8764                   xf   17r      REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log gmain      8764  8772             xf  mem       REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log gmain      8764  8772             xf  mem       REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home gmain      8764  8772             xf   16r      REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home gmain      8764  8772             xf   17r      REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log gdbus      8764  8773             xf  mem       REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log gdbus      8764  8773             xf  mem       REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home gdbus      8764  8773             xf   16r      REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home gdbus      8764  8773             xf   17r      REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log dconf      8764  8927             xf  mem       REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log dconf      8764  8927             xf  mem       REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home dconf      8764  8927             xf   16r      REG                8,3       528 52016339 /home/xf/.local/share/gvfs-metadata/home dconf      8764  8927             xf   17r      REG                8,3     32768 52016193 /home/xf/.local/share/gvfs-metadata/home-c8370b51.log gnome-sof  8814                   xf   27r      DIR                8,3        89 52015751 /home/xf/.local/share/flatpak/repo gnome-sof  8814                   xf   28r      DIR                8,3         6   843301 /home/xf/.local/share/flatpak/repo/objects gnome-sof  8814                   xf   29r      DIR                8,3        19 17315607 /home/xf/.local/share/flatpak/repo/tmp gnome-sof  8814                   xf   30r      DIR                8,3         6 52015800 /home/xf/.local/share/flatpak/repo/tmp/cache gmain      8814  8841             xf   27r      DIR                8,3        89 52015751 /home/xf/.local/share/flatpak/repo gmain      8814  8841             xf   28r      DIR                8,3         6   843301 /home/xf/.local/share/flatpak/repo/objects gmain      8814  8841             xf   29r      DIR                8,3        19 17315607 /home/xf/.local/share/flatpak/repo/tmp gmain      8814  8841             xf   30r      DIR                8,3         6 52015800 /home/xf/.local/share/flatpak/repo/tmp/cache gdbus      8814  8847             xf   27r      DIR                8,3        89 52015751 /home/xf/.local/share/flatpak/repo gdbus      8814  8847             xf   28r      DIR                8,3         6   843301 /home/xf/.local/share/flatpak/repo/objects gdbus      8814  8847             xf   29r      DIR                8,3        19 17315607 /home/xf/.local/share/flatpak/repo/tmp gdbus      8814  8847             xf   30r      DIR                8,3         6 52015800 /home/xf/.local/share/flatpak/repo/tmp/cache dconf      8814  8920             xf   27r      DIR                8,3        89 52015751 /home/xf/.local/share/flatpak/repo dconf      8814  8920             xf   28r      DIR                8,3         6   843301 /home/xf/.local/share/flatpak/repo/objects dconf      8814  8920             xf   29r      DIR                8,3        19 17315607 /home/xf/.local/share/flatpak/repo/tmp dconf      8814  8920             xf   30r      DIR                8,3         6 52015800 /home/xf/.local/share/flatpak/repo/tmp/cache tracker-s  8875                   xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal dconf      8875  8883             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal gmain      8875  8884             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal gdbus      8875  8885             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal pool       8875  8886             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal pool       8875  8887             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal pool       8875  8888             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal pool       8875  8889             xf   12w      REG                8,3    284395 35774061 /home/xf/.local/share/tracker/data/tracker-store.journal evolution  8911                   xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db gmain      8911  8931             xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db dconf      8911  8933             xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db evolution  8911  8934             xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db gdbus      8911  8935             xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db pool       8911  8959             xf   11u      REG                8,3     24576    35380 /home/xf/.local/share/evolution/addressbook/system/contacts.db gvfsd-met  9829                   xf  mem       REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log gvfsd-met  9829                   xf  mem       REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gvfsd-met  9829                   xf    8r      REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gvfsd-met  9829                   xf    9u      REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log gmain      9829  9831             xf  mem       REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log gmain      9829  9831             xf  mem       REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gmain      9829  9831             xf    8r      REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gmain      9829  9831             xf    9u      REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log gdbus      9829  9833             xf  mem       REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log gdbus      9829  9833             xf  mem       REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gdbus      9829  9833             xf    8r      REG                8,3        64 52016746 /home/xf/.local/share/gvfs-metadata/root gdbus      9829  9833             xf    9u      REG                8,3     32768 52016756 /home/xf/.local/share/gvfs-metadata/root-5245f849.log

5）列出某个用户打开的所有文件相关的进程信息

?

1 2 3 4 5 6 7 8 9 10 11 12

[xf@xuexi ~]$ lsof -u xf | more -10 COMMAND     PID USER   FD      TYPE             DEVICE  SIZE/OFF     NODE NAME gnome-key  8232   xf  cwd   unknown                                       /proc/8232/cwd (readlink: Permission denied) gnome-key  8232   xf  rtd   unknown                                       /proc/8232/root (readlink: Permission denied) gnome-key  8232   xf  txt   unknown                                       /proc/8232/exe (readlink: Permission denied) gnome-key  8232   xf NOFD                                                 /proc/8232/fd (opendir: Permission denied) gnome-ses  8239   xf  cwd       DIR                8,3      4096 52016724 /home/xf gnome-ses  8239   xf  rtd       DIR                8,3       259       64 / gnome-ses  8239   xf  txt       REG                8,3    298688 17575626 /usr/libexec/gnome-session-binary gnome-ses  8239   xf  mem       REG                8,3     54856 34038802 /usr/lib64/gio/modules/libdconfsettings.so gnome-ses  8239   xf  mem       REG                8,3 106075056 33853815 /usr/lib/locale/locale-archive --More--

6）使用不同方法列出与程序有关的文件

方法一：使用-c选项

?

1 2 3 4 5 6

[xf@xuexi ~]$ lsof -c sleep COMMAND   PID USER   FD      TYPE DEVICE SIZE/OFF NODE NAME sleep   15392 root  cwd   unknown                      /proc/15392/cwd (readlink: Permission denied) sleep   15392 root  rtd   unknown                      /proc/15392/root (readlink: Permission denied) sleep   15392 root  txt   unknown                      /proc/15392/exe (readlink: Permission denied) sleep   15392 root NOFD                                /proc/15392/fd (opendir: Permission denied)

方法二：使用grep重定向

?

1 2 3 4 5

[xf@xuexi ~]$ lsof | grep sleep sleep     15462                 root  cwd   unknown                                       /proc/15462/cwd (readlink: Permission denied) sleep     15462                 root  rtd   unknown                                       /proc/15462/root (readlink: Permission denied) sleep     15462                 root  txt   unknown                                       /proc/15462/exe (readlink: Permission denied) sleep     15462                 root NOFD                                                 /proc/15462/fd (opendir: Permission denied)

方法三：使用-p选项

?

1 2 3 4 5 6 7 8 9

[xf@xuexi ~]$ ps aux | grep sleep root      16071  0.0  0.0 107952   616 ?        S    16:45   0:00 sleep 60 xf        16087  0.0  0.0 112724   988 pts/0    S+   16:45   0:00 grep --color=auto sleep [xf@xuexi ~]$ lsof -p 16071 COMMAND   PID USER   FD      TYPE DEVICE SIZE/OFF NODE NAME sleep   16071 root  cwd   unknown                      /proc/16071/cwd (readlink: Permission denied) sleep   16071 root  rtd   unknown                      /proc/16071/root (readlink: Permission denied) sleep   16071 root  txt   unknown                      /proc/16071/exe (readlink: Permission denied) sleep   16071 root NOFD                                /proc/16071/fd (opendir: Permission denied)

7）列出所有网络连接，或指定条件的进程

列出所有网络连接

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28

[root@xuexi ~]# lsof -i COMMAND    PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME systemd      1   root   39u  IPv4  33780      0t0  TCP *:sunrpc (LISTEN) systemd      1   root   40u  IPv4  33781      0t0  UDP *:sunrpc systemd      1   root   41u  IPv6  33782      0t0  TCP *:sunrpc (LISTEN) systemd      1   root   42u  IPv6  33783      0t0  UDP *:sunrpc avahi-dae 6814  avahi   12u  IPv4  35540      0t0  UDP *:mdns avahi-dae 6814  avahi   13u  IPv4  35541      0t0  UDP *:57126 rpcbind   6816    rpc    4u  IPv4  33780      0t0  TCP *:sunrpc (LISTEN) rpcbind   6816    rpc    5u  IPv4  33781      0t0  UDP *:sunrpc rpcbind   6816    rpc    6u  IPv6  33782      0t0  TCP *:sunrpc (LISTEN) rpcbind   6816    rpc    7u  IPv6  33783      0t0  UDP *:sunrpc rpcbind   6816    rpc   10u  IPv4  35511      0t0  UDP *:3com-amp3 rpcbind   6816    rpc   11u  IPv6  35512      0t0  UDP *:3com-amp3 chronyd   6860 chrony    1u  IPv4  38834      0t0  UDP localhost:323 chronyd   6860 chrony    2u  IPv6  38835      0t0  UDP localhost:323 dhclient  7280   root    6u  IPv4  43307      0t0  UDP *:bootpc cupsd     7480   root   11u  IPv6  42956      0t0  TCP localhost:ipp (LISTEN) cupsd     7480   root   12u  IPv4  42957      0t0  TCP localhost:ipp (LISTEN) sshd      7482   root    3u  IPv4  46015      0t0  TCP *:italk (LISTEN) sshd      7482   root    4u  IPv6  46024      0t0  TCP *:italk (LISTEN) sshd      7482   root    5u  IPv4  46026      0t0  TCP *:ssh (LISTEN) sshd      7482   root    6u  IPv6  46028      0t0  TCP *:ssh (LISTEN) master    7733   root   13u  IPv4  46278      0t0  TCP localhost:smtp (LISTEN) master    7733   root   14u  IPv6  46279      0t0  TCP localhost:smtp (LISTEN) dnsmasq   7770 nobody    3u  IPv4  49235      0t0  UDP *:bootps dnsmasq   7770 nobody    5u  IPv4  49238      0t0  UDP xuexi:domain dnsmasq   7770 nobody    6u  IPv4  49239      0t0  TCP xuexi:domain (LISTEN)

列出使用指定网络条件的进程

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

[root@xuexi ~]# lsof -i 4 COMMAND    PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME systemd      1   root   39u  IPv4  33780      0t0  TCP *:sunrpc (LISTEN) systemd      1   root   40u  IPv4  33781      0t0  UDP *:sunrpc avahi-dae 6814  avahi   12u  IPv4  35540      0t0  UDP *:mdns avahi-dae 6814  avahi   13u  IPv4  35541      0t0  UDP *:57126 rpcbind   6816    rpc    4u  IPv4  33780      0t0  TCP *:sunrpc (LISTEN) rpcbind   6816    rpc    5u  IPv4  33781      0t0  UDP *:sunrpc rpcbind   6816    rpc   10u  IPv4  35511      0t0  UDP *:3com-amp3 chronyd   6860 chrony    1u  IPv4  38834      0t0  UDP localhost:323 dhclient  7280   root    6u  IPv4  43307      0t0  UDP *:bootpc cupsd     7480   root   12u  IPv4  42957      0t0  TCP localhost:ipp (LISTEN) sshd      7482   root    3u  IPv4  46015      0t0  TCP *:italk (LISTEN) sshd      7482   root    5u  IPv4  46026      0t0  TCP *:ssh (LISTEN) master    7733   root   13u  IPv4  46278      0t0  TCP localhost:smtp (LISTEN) dnsmasq   7770 nobody    3u  IPv4  49235      0t0  UDP *:bootps dnsmasq   7770 nobody    5u  IPv4  49238      0t0  UDP xuexi:domain dnsmasq   7770 nobody    6u  IPv4  49239      0t0  TCP xuexi:domain (LISTEN)

8）列出指定目录下使用NFS文件系统的所有文件

?

1 2 3 4 5 6 7 8 9 10 11 12

[xf@xuexi ~]$ lsof -n /home/xf | more -10 COMMAND     PID USER   FD   TYPE DEVICE SIZE/OFF     NODE NAME gnome-ses  8239   xf  cwd    DIR    8,3     4096 52016724 /home/xf dbus-laun  8248   xf  cwd    DIR    8,3     4096 52016724 /home/xf dbus-daem  8249   xf  cwd    DIR    8,3     4096 52016724 /home/xf gvfsd      8316   xf  cwd    DIR    8,3     4096 52016724 /home/xf gvfsd-fus  8321   xf  cwd    DIR    8,3     4096 52016724 /home/xf at-spi-bu  8443   xf  cwd    DIR    8,3     4096 52016724 /home/xf dbus-daem  8448   xf  cwd    DIR    8,3     4096 52016724 /home/xf at-spi2-r  8451   xf  cwd    DIR    8,3     4096 52016724 /home/xf gnome-she  8480   xf  cwd    DIR    8,3     4096 52016724 /home/xf --More--