1.释义

查看进程打开的文件、目录，还可以查看进程监听的端口等socket相关的信息

2.系统帮助

lsof: illegal option character: -

lsof: -e not followed by a file system path: "lp"

lsof 4.87

latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/

latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ

latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man

usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-f[gG]] [+|-e s]

[-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]

[+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]

Defaults in parentheses; comma-separated set (s) items; dash-separated ranges.

-?|-h list help -a AND selections (OR) -b avoid kernel blocks

-c c cmd c ^c /c/[bix] +c w COMMAND width (9) +d s dir s files

-d s select by FD set +D D dir D tree *SLOW?* +|-e s exempt s *RISKY*

-i select IPv[46] files -K list tasKs (threads) -l list UID numbers

-n no host names -N select NFS files -o list file offset

-O no overhead *RISKY* -P no port names -R list paRent PID

-s list file size -t terse listing -T disable TCP/TPI info

-U select Unix socket -v list version info -V verbose search

+|-w Warnings (+) -X skip TCP&UDP* files -Z Z context [Z]

-- end option scan

+f|-f +filesystem or -file names +|-f[gG] flaGs

-F [f] select fields; -F? for help

+|-L [l] list (+) suppress (-) link counts < l (0 = all; default = 0)

+m [m] use|create mount supplement

+|-M portMap registration (-) -o o o 0t offset digits (8)

-p s exclude(^)|select PIDs -S [t] t second stat timeout (15)

-T qs TCP/TPI Q,St (s) info

-g [s] exclude(^)|select and print process group IDs

-i i select by IPv[46] address: [46][proto][@host|addr][:svc_list|port_list]

+|-r [t[m]] repeat every t seconds (15); + until no files, - forever.

An optional suffix to t is m; m must separate t from and

is an strftime(3) format for the marker line.

-s p:s exclude(^)|select protocol (p = TCP|UDP) states by name(s).

-u s exclude(^)|select login|UID set s

-x [fl] cross over +d|+D File systems or symbolic Links

names select named files or files on named file systems

Anyone can list all files; /dev warnings disabled; kernel ID check disabled.

-a 指示其它选项之间为与的关系

-c 输出指定进程所打开的文件

-d 列出占用该文件号的进程

+d 输出目录及目录下被打开的文件和目录(不递归)

+D 递归输出及目录下被打开的文件和目录

-i 输出符合条件与网络相关的文件

-n 不解析主机名

-p 输出指定 PID 的进程所打开的文件

-P 不解析端口号

-t 只输出 PID

-u 输出指定用户打开的文件

-U 输出打开的 UNIX domain socket 文件

-h 显示帮助信息

-v 显示版本信息

3.示例

3.1.查看端口连接信息

[root@itbkz.com home]#lsof -i :22

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME

sshd 4300 root 3u IPv4 771312 0t0 TCP itbkz.com:ssh->172.20.3.63:62590 (ESTABLISHED)

sshd 4376 root 3u IPv4 772558 0t0 TCP itbkz.com:ssh->172.20.3.63:57989 (ESTABLISHED)

sshd 4395 root 3u IPv4 771330 0t0 TCP itbkz.com:ssh->172.20.3.63:57999 (ESTABLISHED)

sshd 5334 root 3u IPv4 33110 0t0 TCP *:ssh (LISTEN)

sshd 5334 root 4u IPv6 33119 0t0 TCP *:ssh (LISTEN)

sshd 8442 root 3u IPv4 1305231 0t0 TCP itbkz.com:ssh->172.20.3.63:65236 (ESTABLISHED)

IT博客站版权所有丨如未注明 , 均为原创丨本网站采用BY-NC-SA协议进行授权

转载请注明原文链接：lsof命令查看进程socket相关信息