1. Examples

2. Lsof output

3. See also

4. References

5. External links

Examples

Open files in the system include disk files, named pipes, network sockets and devices opened by all processes. One use for this command is when a disk cannot be unmounted because (unspecified) files are in use. The listing of open files can be consulted (suitably filtered if necessary) to identify the process that is using the files.

1. lsof /var

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME

syslogd 350 root 5w VREG 222,5 0 440818 /var/adm/messages

syslogd 350 root 6w VREG 222,5 339098 6248 /var/log/syslog

cron 353 root cwd VDIR 222,5 512 254550 /var -- atjobs

To view the port associated with a daemon:

1. lsof -i -n -P | grep sendmail

sendmail 31649 root 4u IPv4 521738 TCP *:25 (LISTEN)

From the above one can see that "sendmail" is listening on its standard port of "25".

-i

Lists IP sockets.

-n

Do not resolve hostnames (no DNS).

-P

Do not resolve port names (list port number instead of its name).

One can also list Unix Sockets by using lsof -U.

Lsof output

The lsof output describes:

• the identification number of the process (PID) that has opened the file;
• the process group identification number (PGID) of the process (optional);
• the process identification number of the parent process (PPID) (optional);
• the command the process is executing;
• the owner of the process;
• for all files in use by the process, including the executing text file and the shared libraries it is using:
  • the file descriptor number of the file, if applicable;
  • the file's access mode;
  • the file's lock status;
  • the file's device numbers;
  • the file's inode number;
  • the file's size or offset;
  • the name of the file system containing the file;
  • any available components of the file's path name;
  • the names of the file's stream components;
  • the file's local and remote network addresses;
  • the TLI network (typically UDP) state of the file;
  • the TCP state, read queue length, and write queue length of the file;
  • the file's TCP window read and write lengths (Solaris only); and
  • other file or dialect-specific values.

See also

• fuser (Unix)
• stat (Unix)
• netstat
• strace
• List of Unix commands

References

External links

• {{Official website}}
• [https://lists.purdue.edu/mailman/listinfo/lsof-l lsof-l mailing list]
• mirror of sources
• {{man|8|lsof|die.net}}
• {{man|8|lsof|Darwin}}
• Using lsof
• Lsof FAQ
• Sam Nelson's [https://web.archive.org/web/20070509052951/http://www.unix.ms/pcp/ PCP] script, an alternative to "lsof -i" for Solaris.
• Glsof is two separate utilities (Queries and Filemonitor) based on lsof.
• Sloth is a macOS graphical interface for lsof
• [https://netadmintools.com/html/lsof.man.html Manpage of LSOF]

• Paws and Claws: Pet Vet
• Paws and Claws Pet Vet
• Paws and Tales
• Paws and tales
• Pawsey Medal
• Paws (film)
• Paws (Northeastern)
• Pawson Peak
• Paw sox
• P'awstos Buzandac'i
• Pawtograph
• Paw-Tracks
• Pawtuckaway
• Pawtuckaway lake
• Pawtuckaway Pond
• Pawtuckaway State Park
• Pawtucket Armory
• Pawtucket-Central Falls station
• Pawtucket/Central Falls train station
• Pawtucket City Hall
• Pawtucket Congregational Church
• Pawtucket Congregational Church (Lowell, Massachusetts)
• Pawtucket (disambiguation)
• Pawtucket Elks Lodge Building
• Pawtucket Falls (disambiguation)