Commands tagged lsof (40)

  • Show whats going on restoring files from a spectrum protect backup

    spectrum protect's dsmc command shows file names and total amount of restore. This command shows which files are actually open and their siz in GB and highlights the change to the previous output Show Sample Output


    1
    watch -n60 -d 'lsof -w /filesysname|grep -v NAME|awk '\''{$7=int($7/1073741824) " GB"; print $7, $9}'\'''
    BodoGreif · 2019-09-02 11:49:20 0
  • list current processes writing to hard drive


    1
    lsof | grep -e "[[:digit:]]\+w"
    aysadk · 2020-01-27 23:10:38 0
  • Display any udp/tcp connections by process name or by process id

    Where COMMAND is the process(es) name. I prefer to get all states but you may add ESTABLISHED in the grep regex. lsof -c apache2 | egrep -o 'TCP.*ESTABLISHED.*$' -nP flags are optional and UDP is irrelevant for established connections Similar but using the process id: lsof -nP -p PID | egrep -o '(TCP|UDP).*$' Show Sample Output


    0
    lsof -nP -c COMMAND | egrep -o '(TCP|UDP).*$' | sort -u
    forcefsck · 2011-01-25 12:04:13 0
  • Watch your websites php

    Shows files and processes of the command php


    0
    watch -d=c -n3 'lsof -itcp -iudp -c php'
    AskApache · 2013-03-14 01:24:50 0
  • identify active network connections


    0
    lsof -i -P +c 0 +M | grep -i "$1"
    opexxx · 2013-03-19 10:42:15 0
  • What addresses are your applications talking to?

    Shows which applications are making connections, and the addresses they're connecting to. Refreshes every 2 seconds (watch's default). Test on OSX, should work anywhere watch and lsof work. Show Sample Output


    0
    watch "lsof -i -P |grep ESTABLISHED |awk '{printf \"%15.15s \\t%s\\n\", \$1, \$9}'"
    skarfacegc · 2013-04-03 02:04:11 0
  • View all file descriptors owned by a process

    Inner "ps...grep..." command searches for a process matching the specified . "lsof -p lists all file descriptors owned by . Includes open files, sockets, devices, etc... Show Sample Output


    0
    sudo lsof -p `sudo ps aux | grep -i neo4j | grep -v grep | awk '{ print $2 }'`
    andycunn · 2013-06-02 10:15:30 1
  • Show apps that use internet connection at the moment.

    Show top apps that use internet, sorted by count connections and grouped by TYPE and Protocol Show Sample Output


    0
    sudo lsof -P -i -n | awk '{print $1,$5,$8}' | tail -n +2 | uniq -c | sort -nr
    anton_slim · 2014-12-18 05:22:33 0
  • Show top of programms which are open file descriptors now, sorted by count DESC, grouped by process name and pid

    Show what the process are opening many many file descriptos now, we can analyze this for the reason why server is worked slowly. Show Sample Output


    0
    sudo lsof | awk '{print $1,$2}' | sort | uniq -c | sort -nr
    anton_slim · 2014-12-18 05:42:15 0
  • dynamically list open files for a given process name

    us lsof, grep for any pid matching a given name such as "node". Show Sample Output


    0
    lsof -i -n -P | grep -e "$(ps aux | grep node | grep -v grep | awk -F' ' '{print $2}' | xargs | awk -F' ' '{str = $1; for(i = 2; i < NF; i++) {str = str "\\|" $i} print str}')"
    hochmeister · 2015-02-14 23:24:00 3
  • To see which software currently open in directory /var/cache


    0
    lsof -Pn +D /var/cache/ | awk '{print $1}' | sort | uniq
    olto · 2015-11-12 05:30:44 0
  • View open file descriptors for a process.


    -1
    lsof -p <process_id> | wc -l
    virtualshock · 2009-07-20 17:46:54 0
  • pid list by httpd listen port

    % lsof -v lsof version information: revision: 4.78


    -1
    lsof | awk '/*:https?/{print $2}' | sort -u
    sugitaro · 2011-02-04 01:37:17 0
  • check open ports (both ipv4 and ipv6)

    This option selects the listing of all Internet and x.25 (HP-UX) network files. Show Sample Output


    -1
    lsof -i
    shsingh · 2011-10-03 02:06:30 0
  • check open ports (both ipv4 and ipv6)

    This option is much faster, as it checks only network nodes. Show Sample Output


    -2
    lsof -Pi | grep LISTEN
    5partan · 2011-10-03 12:50:18 0
  •  < 1 2

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

A fun thing to do with ram is actually open it up and take a peek. This command will show you all the string (plain text) values in ram
cat? dd? RTFM

Unlock VMs in Proxmox
Unlock your VMS to avoid problems after some failed tasks ended.

list block devices
Shows all block devices in a tree with descruptions of what they are.

how many packages installed on your archlinux?

generate a randome 10 character password

print line and execute it in BASH
If script.sh contains only these two lines: $ uname -a $ whoami

Find artist and title of a music cd, UPC code given (first result only)
I like curl better than wget, I just think that curl -s is a lot simpler than wget ... see I forget what you even have to do to get wget to pipe it's output Anyway, all in one sed command as "requested"

List all files in current dir and subdirs sorted by size
or $ tree -ifsF --noreport .|sort -n -k2|grep -v '/$' (rows presenting directory names become hidden)

Examine processes generating traffic on your website
I often have to google this so I put it here for quick reference.

Find usb device in realtime
Using this command you can track a moment when usb device was attached.

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for: