lsof获取进程打开的所有文件

lsof -p <PID>

[root@localhost ~]# lsof -p 1179
COMMAND    PID USER   FD      TYPE DEVICE SIZE/OFF     NODE NAME
rhsmcertd 1179 root  cwd       DIR  253,0      262      128 /
rhsmcertd 1179 root  rtd       DIR  253,0      262      128 /
rhsmcertd 1179 root  txt       REG  253,0    27920 26309801 /usr/bin/rhsmcertd
rhsmcertd 1179 root  mem       REG  253,0    51808    46169 /usr/lib64/libffi.so.6.0.2
rhsmcertd 1179 root  mem       REG  253,0  1503456    46273 /usr/lib64/libgmp.so.10.3.2
rhsmcertd 1179 root  mem       REG  253,0   248080    46438 /usr/lib64/libhogweed.so.4.5
rhsmcertd 1179 root  mem       REG  253,0   299920    46440 /usr/lib64/libnettle.so.6.5
rhsmcertd 1179 root  mem       REG  253,0    81408    46487 /usr/lib64/libtasn1.so.6.5.5
rhsmcertd 1179 root  mem       REG  253,0    52328    45787 /usr/lib64/libdl-2.28.so
rhsmcertd 1179 root  mem       REG  253,0  1760264    46445 /usr/lib64/libunistring.so.2.1.0
rhsmcertd 1179 root  mem       REG  253,0   162224    46447 /usr/lib64/libidn2.so.0.3.6
rhsmcertd 1179 root  mem       REG  253,0  1295528    46173 /usr/lib64/libp11-kit.so.0.3.0
rhsmcertd 1179 root  mem       REG  253,0   754552    45799 /usr/lib64/libpthread-2.28.so
rhsmcertd 1179 root  mem       REG  253,0   471224    46234 /usr/lib64/libpcre.so.1.2.10
rhsmcertd 1179 root  mem       REG  253,0  2521184   993940 /usr/lib64/libgnutls.so.30.24.0
rhsmcertd 1179 root  mem       REG  253,0  5993088    45785 /usr/lib64/libc-2.28.so
rhsmcertd 1179 root  mem       REG  253,0  1471440   993895 /usr/lib64/libglib-2.0.so.0.5600.4
rhsmcertd 1179 root  mem       REG  253,0   385384    45778 /usr/lib64/ld-2.28.so
rhsmcertd 1179 root  mem       REG  253,0    83927  8938043 /usr/share/locale/ja/LC_MESSAGES/glib20.mo
rhsmcertd 1179 root  mem       REG  253,0   127104  9609387 /usr/share/locale/ja/LC_MESSAGES/rhsm.mo
rhsmcertd 1179 root  mem       REG  253,0   608424    45759 /usr/lib/locale/ja_JP.utf8/LC_CTYPE
rhsmcertd 1179 root  mem       REG  253,0   439686    45758 /usr/lib/locale/ja_JP.utf8/LC_COLLATE
rhsmcertd 1179 root  mem       REG  253,0       54    45764 /usr/lib/locale/ja_JP.utf8/LC_NUMERIC
rhsmcertd 1179 root  mem       REG  253,0     6356    45767 /usr/lib/locale/ja_JP.utf8/LC_TIME
rhsmcertd 1179 root  mem       REG  253,0      290    45762 /usr/lib/locale/ja_JP.utf8/LC_MONETARY
rhsmcertd 1179 root  mem       REG  253,0      117  8446073 /usr/lib/locale/ja_JP.utf8/LC_MESSAGES/SYS_LC_MESSAGES
rhsmcertd 1179 root  mem       REG  253,0       34    45765 /usr/lib/locale/ja_JP.utf8/LC_PAPER
rhsmcertd 1179 root  mem       REG  253,0       76    45763 /usr/lib/locale/ja_JP.utf8/LC_NAME
rhsmcertd 1179 root  mem       REG  253,0      124    45757 /usr/lib/locale/ja_JP.utf8/LC_ADDRESS
rhsmcertd 1179 root  mem       REG  253,0       54    45766 /usr/lib/locale/ja_JP.utf8/LC_TELEPHONE
rhsmcertd 1179 root  mem       REG  253,0       23    45761 /usr/lib/locale/ja_JP.utf8/LC_MEASUREMENT
rhsmcertd 1179 root  mem       REG  253,0    26998 16857916 /usr/lib64/gconv/gconv-modules.cache
rhsmcertd 1179 root  mem       REG  253,0      339    45760 /usr/lib/locale/ja_JP.utf8/LC_IDENTIFICATION
rhsmcertd 1179 root    0u      CHR    1,3      0t0       31 /dev/null

每行显示一个打开的文件,若不指定条件默认将显示所有进程打开的所有文件。

lsof输出各列信息的意义如下:

COMMAND:进程的名称 PID:进程标识符

USER:进程所有者

FD:文件描述符,应用程序通过文件描述符识别该文件。如cwd、txt等 TYPE:文件类型,如DIR、REG等

       FD         is the File Descriptor number of the file or:

                       cwd  current working directory;
                       Lnn  library references (AIX);
                       err  FD information error (see NAME column);
                       jld  jail directory (FreeBSD);
                       ltx  shared library text (code and data);
                       Mxx  hex memory-mapped type number xx.
                       m86  DOS Merge mapped file;
                       mem  memory-mapped file;
                       mmap memory-mapped device;
                       pd   parent directory;
                       rtd  root directory;
                       tr   kernel trace file (OpenBSD);
                       txt  program text (code a

DEVICE:指定磁盘的名称

SIZE:文件的大小

NODE:索引节点(文件在磁盘上的标识)

NAME:打开文件的确切名称

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值