The lsof tag has no wiki summary.
0
votes
1answer
16 views
Monitoring a cgi-bin executable's file usage?
One of the programs in my cgi-bin folder is misbehaving. It's a compiled binary for which I do not have the source code. I would like to set up some kind of monitor to gather a list of the files that ...
0
votes
1answer
29 views
KVM how to determine which virtual disk files are in use by VMs
I tried lsof|grep *.qcow2 and got no results back (why is that? I definitely have VMs running using that disk format).
I also considered grepping qcow2 on *.xml within the config directory, but this ...
1
vote
1answer
84 views
lsof displays restored file as deleted
If I create a file named /home/martin/testfile.txt, open this file with less utility, delete /home/martin/testfile.txt file and restore it from file descriptor directory under the /proc/31148, where ...
0
votes
2answers
54 views
How to configure Apache not to keep access.log or error.log open all the time for virtualhosts?
I want to lower number of open files on my VPS. With lsof I noticed that Apache constantly keeps access.log and error.log open for each domain hosted on server.
Is there a way to change this ...
1
vote
1answer
92 views
why in /proc file system have this infomation
run:
lsof|grep delete
can find some process open fd, but system said that it has been deleted:
mingetty 2031 root txt REG 8,2 15256 49021039 /sbin/mingetty (deleted)
I look in ...
0
votes
2answers
152 views
tracking down what files are causing io activity in iostat
Using
iostat -Nkx 1
I can see that I am getting regular IO on a volume group. What I'm trying to do is find a way to link that IO to a file/pipe/whatever to see what process is creating this IO and ...
3
votes
2answers
895 views
How to determine which TCP/UDP ports are being opened by a given process (linux)?
I know how to do the opposite (find out what process has a given port open) using lsof or netstat, but extensive research on Google hasn't helped me solve the reverse problem.
I know I could use ...
1
vote
0answers
165 views
Tracking down an elusive and slow anon_inode from lsof and Apache strace
Experiencing an intermittent issue with a LAMP application wherein Apache forks to its ServerLimit and grinds to a (near) halt. An strace on any httpd process shows numerous, slow epoll_wait calls.
...
0
votes
0answers
21 views
Send-Q in netstat ouput above 15k
Apache webserver running on ubuntu 11.04 64 bit is not accepting connections and a netstat output shows high values for Send-Q for some connections.
What can be the reason.
Send-Q is high for only ...
3
votes
2answers
164 views
trace opening on a certain file
I know how to strace a certain program to see all the files it reads. I know how to see what processes are using a certain file at the moment.
But is there a way to log all file opens. I want ...
1
vote
3answers
847 views
Unexplicated ssh connection from localhost through sshd to random localhost's port
I've tried to find out why I had some strange connections on my secure log file. Something like this :
Apr 23 11:35:43 li192-61 sshd[11651]: Did not receive identification string from 127.0.0.1
Apr ...
1
vote
2answers
511 views
“Too many open files in system” on VPS with LSOF far from MAXFILES
Good day.
Lately my VPS server (CentOS on it) started crushing with "Too many open files in system" error. I read many on the error and know that the limit is set by my hosting provider. I received a ...
7
votes
2answers
213 views
Why am I seeing webmin in lsof output?
I am running a server application (written in C), that is bound to my server on localhost address 127.0.0.1 and let it listen in first case on port 10000 and in second case on port 20000
When I run ...
3
votes
1answer
274 views
how to list files that are NOT open using find command
I want to "list" all the files that are NOT open, within a certain directory using the GNU find command. Now, I am able to list the files that are open, but can't figure out a way to do the inverse of ...
1
vote
2answers
204 views
Unknown process on port, lsof no help, nfs-kernel-server?
During a standard security sweep we found out a something was listening on a port unknown to us, 2030, and we are having trouble determining the source.
# netstat -anp | grep LIST
tcp 0 0 ...
1
vote
2answers
110 views
Command to monitor which processes have a given file open
I know I can use lsof path/to/file to see which processes currently have a given file open.
Is there a top-like command I can use to continuously monitor which processes have a given file open?
2
votes
3answers
429 views
How can lsof report a higher number of open files than what ulimit says should be allowed?
How can lsof report more open files than what ulimit says is the limit?
prod_web3(i-ca0b05aa):~$ sudo lsof | wc -l
4399
prod_web3(i-ca0b05aa):~$ ulimit -n
1024
2
votes
1answer
833 views
What's the difference between `lsof -p <pid> | wc -l` and `ls /proc/<pid>/fd | wc -l`?
Background: I'm playing around with monitoring the ulimit for running processes for a particular user. (I had occasionally seen processes that were getting started with an incorrect limit.) I asked a ...
10
votes
5answers
829 views
How to make my boss understand that a server fault is a bad thing?
I'm currently working in Tokyo for a smaller company that has just started serious online business.
Recently we have been hitting the maximum open files issue on a rented VPS server causing services ...
1
vote
4answers
125 views
How to find the program responsible for a specific TCP socket (linux)
joe@server:~$ sudo lsof -i :36168
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 23059 activemq 15u IPv6 109382 0t0 TCP *:36168 (LISTEN)
From the output above I want ...
2
votes
1answer
270 views
lsof runs REALLY slow when Chromium or Firefox is open
I have a little script that runs lsof on my laptop (Ubuntu Natty) every now and then to check for a few things. I recently noticed that it runs really slowly when I have Chromium or Firefox open.
...
0
votes
2answers
244 views
What is the meaning of this result from running 'lsof -i:8080'?
When I run the following command:
lsof -i:8080
This is the result:
node 32419 root 6u IPv4 122865 TCP localhost.localdomain:webcache (LISTEN)
That result is different from that of ...
1
vote
1answer
275 views
lsof gives warning for some daemon
lsof | grep /var is giving me following error
lsof: WARNING: can't stat() fuse.gvfs-fuse-daemon file system /home/user/.gvfs
Output information may be incomplete.
what can be possible reason for ...
9
votes
3answers
664 views
On Linux, how can I see how far through a file a process is?
If I have a piped command such as
cat myfile | processor_application
where processor_application is something reading from standard in, in chunks, to process, is it possible to see how far ...
0
votes
2answers
436 views
Clearing out deleted memory mapped files quicker?
We use Tika for PDF text content extraction for searching. I'm seeing heavy use of temporary files that seem to now run us out of file handles.
We're on CentOS 5.5. For our search system, we had ...
2
votes
1answer
1k views
How can I observe what nginx is doing? (to solve: “1024 worker_connections are not enough”)
I have a very low traffic site running on nginx, with 4 workers, 1024 connections each.
Every several hours I start seeing in the error log "1024 worker_connections are not enough", and my site slows ...
0
votes
1answer
455 views
Log network traffic with process ID on Mac OS X?
I want to log all network traffic on a Mac OS X server (like tcpdump does), but including the ID of the process that is responsible. Using lsof only gives me the current connections, not the past ...
0
votes
2answers
4k views
How to install LSOF in AIX
I wanna install LSOF in AIX.
I've download the program from https://www14.software.ibm.com/webapp/iwm/web/reg/pick.do?source=aixbp&lang=en_US.
after I unzip the tar file, I don't get readme or ...
2
votes
1answer
384 views
Why is rpc.lockd obscured from netstat/lsof output?
Prologue:
On a number of machines, which happen to act as NFS clients, netstat reports two ports that are open with no PID listed for an associated daemon. Ordinarily this might be a bit concerning.
...
0
votes
3answers
1k views
How to know how many files a process opened efficiently?
I knows I can use the command
lsof -p xxxx | wc -l
to know the count of opened files op a process, it works, but however, it is just too inefficient. I have some server process which have too many ...
0
votes
1answer
48 views
Finding Network Status of specific process name
I am looking for the cleanest way on linux to find the port status for a port being used by a specified program name via the command line. I have seen that netstat -p lists all pids but haven't seen ...
2
votes
2answers
532 views
How to track all files a process opens in its lifetime
I am aware of using lsof for checking the files currently accessed by a process. Does there exist a way to see all files that an application opens in its lifetime?
0
votes
1answer
2k views
How to track down a file descriptor leak?
I have a java process (Glassfish) which is leaking file descriptors. I know this because I get the helpful java.io.IOException: Too many open files exception. I can look in /proc/PID#/fd and see all ...
1
vote
1answer
1k views
lsof not showing what port a proc is listening on
I have many processes on a box listening on several ports.
I am trying to map ports to pids.
The problem is that lsof is not telling me what ports belong to which process.
Given an apache listening ...
0
votes
4answers
280 views
Log file is missing, how can I see that and what happened to it
A process identified by process id 2147 is running, but its logfile is nowhere to be found. The filesystem is ext3 and 100MB of space remains. nothing went wrong in process
2147. An lsof of process ...
9
votes
2answers
3k views
lsof - restrict output to physical files only - how?
How do I tell lsof I need to list only physical files (not sockets, not TCP/IP connections, only physical files)?
1
vote
4answers
3k views
apache listening on 80, but not on any other port
i wanted to change a working apache configuration of example.com (exampleIP = 1.2.3.4 ) to change from the default port 80 to port 8001, such that http://example.com:8001 should work. I wasn't able to ...
0
votes
2answers
352 views
lsof for files opened by other users
How do I see the list of files open in a directory by other users?
I can do "lsof +D", but that only shows current user's files. Any way to see if other users have opened files in a directory?
3
votes
3answers
7k views
Running lsof -i shows a lot of connections in CLOSE_WAIT ? Should I worry
So I am running lsof -i | wc -l periodically and it is telling me that out of 420 lines, between 240 and 255 are in CLOSE_WAIT state. How does TCP connections enter this state ?
Should I be worried ...
10
votes
2answers
1k views
Link to a specific inode
I have a file that was deleted, but is still held open by a program. I found the inode number using lsof. How can I create a hard link back to that inode?
4
votes
4answers
2k views
TCP monitoring on a server: comparing netstat vs lsof?
I'm monitoring the TCP stack on a server hoping to generically infer problems with application on the box.
My first inclination is to measure the number of sockets in all reported states ...
1
vote
2answers
1k views
How to find the other point of a Unix domain socket on Mac OS X to write/read it?
I listed open file for a process (a daemon) on my box which runs Mac OS X 10.5 :
>lsof -p 89
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
...
xxxxx 89 xxxxxxxx 9u unix ...
