{"id":2087,"date":"2015-08-31T11:39:34","date_gmt":"2015-08-31T10:39:34","guid":{"rendered":"https:\/\/stevepedwards.today\/DebianAdmin\/?p=2087"},"modified":"2015-08-31T11:39:34","modified_gmt":"2015-08-31T10:39:34","slug":"cool-command-8-lsof","status":"publish","type":"post","link":"https:\/\/stevepedwards.today\/DebianAdmin\/cool-command-8-lsof\/","title":{"rendered":"Cool Command #8 &#8211; lsof"},"content":{"rendered":"<div class=\"pvc_clear\"><\/div>\n<p id=\"pvc_stats_2087\" class=\"pvc_stats all  \" data-element-id=\"2087\" style=\"\"><i class=\"pvc-stats-icon medium\" aria-hidden=\"true\"><svg aria-hidden=\"true\" focusable=\"false\" data-prefix=\"far\" data-icon=\"chart-bar\" role=\"img\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" class=\"svg-inline--fa fa-chart-bar fa-w-16 fa-2x\"><path fill=\"currentColor\" d=\"M396.8 352h22.4c6.4 0 12.8-6.4 12.8-12.8V108.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v230.4c0 6.4 6.4 12.8 12.8 12.8zm-192 0h22.4c6.4 0 12.8-6.4 12.8-12.8V140.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v198.4c0 6.4 6.4 12.8 12.8 12.8zm96 0h22.4c6.4 0 12.8-6.4 12.8-12.8V204.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v134.4c0 6.4 6.4 12.8 12.8 12.8zM496 400H48V80c0-8.84-7.16-16-16-16H16C7.16 64 0 71.16 0 80v336c0 17.67 14.33 32 32 32h464c8.84 0 16-7.16 16-16v-16c0-8.84-7.16-16-16-16zm-387.2-48h22.4c6.4 0 12.8-6.4 12.8-12.8v-70.4c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v70.4c0 6.4 6.4 12.8 12.8 12.8z\" class=\"\"><\/path><\/svg><\/i> <img loading=\"lazy\" decoding=\"async\" width=\"16\" height=\"16\" alt=\"Loading\" src=\"https:\/\/stevepedwards.today\/DebianAdmin\/wp-content\/plugins\/page-views-count\/ajax-loader-2x.gif\" border=0 \/><\/p>\n<div class=\"pvc_clear\"><\/div>\n<p>An lsof Primer here for this very powerful tool:<\/p>\n<p><a href=\"https:\/\/danielmiessler.com\/study\/lsof\/\" target=\"_blank\">https:\/\/danielmiessler.com\/study\/lsof\/<\/a><\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"ygO9aCclfo\"><p><a href=\"https:\/\/www.tecmint.com\/10-lsof-command-examples-in-linux\/\">10 lsof Command Examples in Linux<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"\"10 lsof Command Examples in Linux\" &#8212; Tecmint: Linux Howtos, Tutorials &amp; Guides\" src=\"https:\/\/www.tecmint.com\/10-lsof-command-examples-in-linux\/embed\/#?secret=9h6CwbqARi#?secret=ygO9aCclfo\" data-secret=\"ygO9aCclfo\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p><span style=\"color: #0000ff;\">man lsof<\/span><\/p>\n<p><span style=\"color: #ff0000;\">DESCRIPTION<\/span><br \/>\n<span style=\"color: #ff0000;\"> Lsof revision 4.86 lists on its standard output file information about files opened by processes for the following UNIX dialects:<\/span><\/p>\n<p><span style=\"color: #ff0000;\">Apple Darwin 9 and Mac OS X 10.[567]<\/span><br \/>\n<span style=\"color: #ff0000;\"> FreeBSD 4.9 and 6.4 for x86-based systems<\/span><br \/>\n<span style=\"color: #ff0000;\"> FreeBSD 8.2, 9.0 and 10.0 for AMD64-based systems<\/span><br \/>\n<span style=\"color: #ff0000;\"> Linux 2.1.72 and above for x86-based systems<\/span><br \/>\n<span style=\"color: #ff0000;\"> Solaris 9, 10 and 11<\/span><\/p>\n<p><span style=\"color: #ff0000;\">(See the DISTRIBUTION section of this manual page for information on how to obtain the latest lsof revision.)<\/span><\/p>\n<p><span style=\"color: #ff0000;\">An open file may be a regular file, a directory, a block special file, a character special file, an executing text reference, a library, a<\/span><br \/>\n<span style=\"color: #ff0000;\"> stream or a network file (Internet socket, NFS file or UNIX domain socket.) A specific file or all the files in a file system may be selected<\/span><br \/>\n<span style=\"color: #ff0000;\"> by path.<\/span><\/p>\n<p><span style=\"color: #ff0000;\">Instead of a formatted display, lsof will produce output that can be parsed by other programs. See the -F, option description, and the OUTPUT<\/span><br \/>\n<span style=\"color: #ff0000;\"> FOR OTHER PROGRAMS section for more information.<\/span><\/p>\n<p><span style=\"color: #ff0000;\">In addition to producing a single output list, lsof will run in repeat mode. In repeat mode it will produce output, delay, then repeat the<\/span><br \/>\n<span style=\"color: #ff0000;\"> output operation until stopped with an interrupt or quit signal. See the +|-r [t[m&lt;fmt&gt;]] option description for more information.<\/span><\/p>\n<p><span style=\"color: #ff0000;\">OPTIONS<\/span><br \/>\n<em><strong><span style=\"color: #ff0000;\"> In the absence of any options, lsof lists all open files belonging to all active processes.<\/span><\/strong><\/em><\/p>\n<p>You may not want to do that ( just\u00a0<span style=\"color: #0000ff;\">lsof\u00a0<\/span>) on a busy production PC!!<\/p>\n<p>You can find a TON of stuff about what a PC is doing with this.<\/p>\n<p><strong>The POWER of LSOF (note diff in O\/P if run as user or root!)<\/strong><\/p>\n<p><a href=\"https:\/\/danielmiessler.com\/study\/lsof\/\" target=\"_blank\">https:\/\/danielmiessler.com\/study\/lsof\/<\/a><\/p>\n<p><span style=\"color: #0000ff;\">sudo lsof -i -sTCP:LISTEN<\/span><br \/>\n<span style=\"color: #ff0000;\">[sudo] password for stevee: <\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">smbd 587 root 30u IPv6 14363 0t0 TCP *:microsoft-ds (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">smbd 587 root 31u IPv6 14364 0t0 TCP *:netbios-ssn (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">smbd 587 root 32u IPv4 14365 0t0 TCP *:microsoft-ds (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">smbd 587 root 33u IPv4 14366 0t0 TCP *:netbios-ssn (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">sshd 894 root 3u IPv4 12056 0t0 TCP *:ssh (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">sshd 894 root 4u IPv6 12058 0t0 TCP *:ssh (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">dnsmasq 1049 dnsmasq 5u IPv4 12809 0t0 TCP localhost:domain (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">dnsmasq 1049 dnsmasq 7u IPv6 12811 0t0 TCP ip6-localhost:domain (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">dnsmasq 1441 nobody 5u IPv4 14661 0t0 TCP Mint5630:domain (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">inetd 1833 root 4u IPv4 14060 0t0 TCP *:ftp (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">cupsd 4037 root 10u IPv4 27876 0t0 TCP *:ipp (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">cupsd 4037 root 11u IPv6 27877 0t0 TCP *:ipp (LISTEN)<\/span><\/p>\n<p><span style=\"color: #0000ff;\">lsof -i -sTCP:ESTABLISHED<\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 81u IPv4 87663 0t0 TCP 192.168.1.16:33365-&gt;ggc02.plus.net:http (ESTABLISHED)<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 82u IPv4 88303 0t0 TCP 192.168.1.16:33366-&gt;ggc02.plus.net:http (ESTABLISHED)<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 139u IPv4 18332 0t0 TCP 192.168.1.16:34323-&gt;wl-in-f188.1e100.net:5228 (ESTABLISHED)<\/span><\/p>\n<p><span style=\"color: #0000ff;\">lsof -i<\/span><br \/>\n<span style=\"color: #0000ff;\">lsof -i 6<\/span><br \/>\n<span style=\"color: #0000ff;\">lsof -i TCP<\/span><br \/>\n<span style=\"color: #0000ff;\">lsof -i UDP<\/span><\/p>\n<p><span style=\"color: #0000ff;\">lsof -i :22<\/span><br \/>\n<span style=\"color: #0000ff;\">lsof -i :443<\/span><\/p>\n<p><span style=\"color: #0000ff;\">lsof -i @192.168.1.16<\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 139u IPv4 18332 0t0 TCP 192.168.1.16:34323-&gt;wl-in-f188.1e100.net:5228 (ESTABLISHED)<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 150u IPv4 52813 0t0 TCP 192.168.1.16:34265-&gt;ec2-107-21-98-35.compute-1.amazonaws.com:http (ESTABLISHED)<\/span><br \/>\n<span style=\"color: #ff0000;\">chrome 3201 stevee 264u IPv4 22091 0t0 UDP 192.168.1.16:38020-&gt;wi-in-f189.1e100.net:http<\/span><\/p>\n<p>How many user ops?<\/p>\n<p><span style=\"color: #0000ff;\">lsof -u stevee | wc -l<\/span><br \/>\n5369<\/p>\n<p><span style=\"color: #0000ff;\">lsof -u www-data<\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data cwd unknown \/proc\/1907\/cwd (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data rtd unknown \/proc\/1907\/root (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data txt unknown \/proc\/1907\/exe (readlink: Permission denied)<\/span><\/p>\n<p><span style=\"color: #0000ff;\">sudo lsof -u www-data | wc -l<\/span><br \/>\n<span style=\"color: #ff0000;\">lsof: WARNING: can't stat() fuse.gvfsd-fuse file system \/run\/user\/1000\/gvfs<\/span><br \/>\n<span style=\"color: #ff0000;\">Output information may be incomplete.<\/span><br \/>\n<span style=\"color: #ff0000;\">97<\/span><\/p>\n<p><span style=\"color: #0000ff;\">lsof -u ^stevee (all users bar me)<\/span><\/p>\n<h3>Kill everything a given user is doing - again - big O\/P diff for user and root, and gives ans idea how busy apache is when not set up as a server.<\/h3>\n<p>It's nice to be able to nuke everything being run by a given user.<\/p>\n<p class=\"command\"># <span style=\"color: #0000ff;\"><span class=\"first\">kill -9 <\/span><span class=\"second\">`lsof -t -u daniel`<\/span><\/span><\/p>\n<p class=\"command\"><span style=\"color: #0000ff;\">lsof -c apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root cwd unknown \/proc\/1904\/cwd (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root rtd unknown \/proc\/1904\/root (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root txt unknown \/proc\/1904\/exe (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root NOFD \/proc\/1904\/fd (opendir: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data cwd unknown \/proc\/1907\/cwd (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data rtd unknown \/proc\/1907\/root (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data txt unknown \/proc\/1907\/exe (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data NOFD \/proc\/1907\/fd (opendir: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data cwd unknown \/proc\/1908\/cwd (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data rtd unknown \/proc\/1908\/root (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data txt unknown \/proc\/1908\/exe (readlink: Permission denied)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data NOFD \/proc\/1908\/fd (opendir: Permission denied)\u00a0<\/span><\/p>\n<p class=\"command\"><span style=\"color: #0000ff;\">sudo lsof -c apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">lsof: WARNING: can't stat() fuse.gvfsd-fuse file system \/run\/user\/1000\/gvfs<\/span><br \/>\n<span style=\"color: #ff0000;\">Output information may be incomplete.<\/span><br \/>\n<span style=\"color: #ff0000;\">COMMAND PID USER FD TYPE DEVICE SIZE\/OFF NODE NAME<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root cwd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root rtd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root txt REG 8,1 581380 274149 \/usr\/sbin\/apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root DEL REG 0,4 14095 \/dev\/zero<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 99888 132098 \/lib\/i386-linux-gnu\/libz.so.1.2.8<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 46812 132010 \/lib\/i386-linux-gnu\/libnss_files-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 42668 132020 \/lib\/i386-linux-gnu\/libnss_nis-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 92036 132004 \/lib\/i386-linux-gnu\/libnsl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 30560 132006 \/lib\/i386-linux-gnu\/libnss_compat-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 21864 273417 \/usr\/lib\/apache2\/modules\/mod_status.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 13672 274136 \/usr\/lib\/apache2\/modules\/mod_setenvif.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 30060 274141 \/usr\/lib\/apache2\/modules\/mod_negotiation.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 54636 274135 \/usr\/lib\/apache2\/modules\/mod_mpm_event.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 17764 273403 \/usr\/lib\/apache2\/modules\/mod_mime.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 17768 274123 \/usr\/lib\/apache2\/modules\/mod_filter.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9572 273413 \/usr\/lib\/apache2\/modules\/mod_env.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9572 273374 \/usr\/lib\/apache2\/modules\/mod_dir.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 30056 274127 \/usr\/lib\/apache2\/modules\/mod_deflate.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 34156 274143 \/usr\/lib\/apache2\/modules\/mod_autoindex.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 5484 274089 \/usr\/lib\/apache2\/modules\/mod_authz_user.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9580 274109 \/usr\/lib\/apache2\/modules\/mod_authz_host.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 21868 274077 \/usr\/lib\/apache2\/modules\/mod_authz_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9580 274142 \/usr\/lib\/apache2\/modules\/mod_authn_file.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9580 274145 \/usr\/lib\/apache2\/modules\/mod_authn_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 13676 274125 \/usr\/lib\/apache2\/modules\/mod_auth_basic.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 13672 273407 \/usr\/lib\/apache2\/modules\/mod_alias.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 9584 273382 \/usr\/lib\/apache2\/modules\/mod_access_compat.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 13856 131951 \/lib\/i386-linux-gnu\/libdl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 18036 135656 \/lib\/i386-linux-gnu\/libuuid.so.1.3.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 161156 131956 \/lib\/i386-linux-gnu\/libexpat.so.1.6.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 38456 131944 \/lib\/i386-linux-gnu\/libcrypt-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 1754876 131934 \/lib\/i386-linux-gnu\/libc-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 134614 132055 \/lib\/i386-linux-gnu\/libpthread-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 203148 401061 \/usr\/lib\/i386-linux-gnu\/libapr-1.so.0.5.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 157960 401067 \/usr\/lib\/i386-linux-gnu\/libaprutil-1.so.0.5.3<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 247196 131988 \/lib\/i386-linux-gnu\/libpcre.so.3.13.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root mem REG 8,1 134380 131908 \/lib\/i386-linux-gnu\/ld-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 0r CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 1w CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 2w REG 8,1 1429 2103957 \/var\/log\/apache2\/error.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 3u sock 0,7 0t0 14993 can't identify protocol<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 5r FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 6w FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 7w REG 8,1 0 2103959 \/var\/log\/apache2\/other_vhosts_access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1904 root 8w REG 8,1 161 2103958 \/var\/log\/apache2\/access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data cwd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data rtd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data txt REG 8,1 581380 274149 \/usr\/sbin\/apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 113588 131961 \/lib\/i386-linux-gnu\/libgcc_s.so.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data DEL REG 0,4 14095 \/dev\/zero<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 99888 132098 \/lib\/i386-linux-gnu\/libz.so.1.2.8<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 46812 132010 \/lib\/i386-linux-gnu\/libnss_files-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 42668 132020 \/lib\/i386-linux-gnu\/libnss_nis-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 92036 132004 \/lib\/i386-linux-gnu\/libnsl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 30560 132006 \/lib\/i386-linux-gnu\/libnss_compat-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 21864 273417 \/usr\/lib\/apache2\/modules\/mod_status.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 13672 274136 \/usr\/lib\/apache2\/modules\/mod_setenvif.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 30060 274141 \/usr\/lib\/apache2\/modules\/mod_negotiation.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 54636 274135 \/usr\/lib\/apache2\/modules\/mod_mpm_event.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 17764 273403 \/usr\/lib\/apache2\/modules\/mod_mime.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 17768 274123 \/usr\/lib\/apache2\/modules\/mod_filter.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9572 273413 \/usr\/lib\/apache2\/modules\/mod_env.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9572 273374 \/usr\/lib\/apache2\/modules\/mod_dir.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 30056 274127 \/usr\/lib\/apache2\/modules\/mod_deflate.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 34156 274143 \/usr\/lib\/apache2\/modules\/mod_autoindex.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 5484 274089 \/usr\/lib\/apache2\/modules\/mod_authz_user.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9580 274109 \/usr\/lib\/apache2\/modules\/mod_authz_host.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 21868 274077 \/usr\/lib\/apache2\/modules\/mod_authz_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9580 274142 \/usr\/lib\/apache2\/modules\/mod_authn_file.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9580 274145 \/usr\/lib\/apache2\/modules\/mod_authn_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 13676 274125 \/usr\/lib\/apache2\/modules\/mod_auth_basic.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 13672 273407 \/usr\/lib\/apache2\/modules\/mod_alias.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 9584 273382 \/usr\/lib\/apache2\/modules\/mod_access_compat.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 13856 131951 \/lib\/i386-linux-gnu\/libdl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 18036 135656 \/lib\/i386-linux-gnu\/libuuid.so.1.3.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 161156 131956 \/lib\/i386-linux-gnu\/libexpat.so.1.6.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 38456 131944 \/lib\/i386-linux-gnu\/libcrypt-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 1754876 131934 \/lib\/i386-linux-gnu\/libc-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 134614 132055 \/lib\/i386-linux-gnu\/libpthread-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 203148 401061 \/usr\/lib\/i386-linux-gnu\/libapr-1.so.0.5.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 157960 401067 \/usr\/lib\/i386-linux-gnu\/libaprutil-1.so.0.5.3<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 247196 131988 \/lib\/i386-linux-gnu\/libpcre.so.3.13.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data mem REG 8,1 134380 131908 \/lib\/i386-linux-gnu\/ld-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 0r CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 1w CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 2w REG 8,1 1429 2103957 \/var\/log\/apache2\/error.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 3u sock 0,7 0t0 14993 can't identify protocol<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 5r FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 6w FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 7w REG 8,1 0 2103959 \/var\/log\/apache2\/other_vhosts_access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 8w REG 8,1 161 2103958 \/var\/log\/apache2\/access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1907 www-data 9u 0000 0,9 0 7813 anon_inode<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data cwd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data rtd DIR 8,1 4096 2 \/<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data txt REG 8,1 581380 274149 \/usr\/sbin\/apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 113588 131961 \/lib\/i386-linux-gnu\/libgcc_s.so.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data DEL REG 0,4 14095 \/dev\/zero<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 99888 132098 \/lib\/i386-linux-gnu\/libz.so.1.2.8<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 46812 132010 \/lib\/i386-linux-gnu\/libnss_files-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 42668 132020 \/lib\/i386-linux-gnu\/libnss_nis-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 92036 132004 \/lib\/i386-linux-gnu\/libnsl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 30560 132006 \/lib\/i386-linux-gnu\/libnss_compat-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 21864 273417 \/usr\/lib\/apache2\/modules\/mod_status.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 13672 274136 \/usr\/lib\/apache2\/modules\/mod_setenvif.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 30060 274141 \/usr\/lib\/apache2\/modules\/mod_negotiation.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 54636 274135 \/usr\/lib\/apache2\/modules\/mod_mpm_event.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 17764 273403 \/usr\/lib\/apache2\/modules\/mod_mime.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 17768 274123 \/usr\/lib\/apache2\/modules\/mod_filter.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9572 273413 \/usr\/lib\/apache2\/modules\/mod_env.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9572 273374 \/usr\/lib\/apache2\/modules\/mod_dir.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 30056 274127 \/usr\/lib\/apache2\/modules\/mod_deflate.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 34156 274143 \/usr\/lib\/apache2\/modules\/mod_autoindex.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 5484 274089 \/usr\/lib\/apache2\/modules\/mod_authz_user.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9580 274109 \/usr\/lib\/apache2\/modules\/mod_authz_host.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 21868 274077 \/usr\/lib\/apache2\/modules\/mod_authz_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9580 274142 \/usr\/lib\/apache2\/modules\/mod_authn_file.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9580 274145 \/usr\/lib\/apache2\/modules\/mod_authn_core.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 13676 274125 \/usr\/lib\/apache2\/modules\/mod_auth_basic.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 13672 273407 \/usr\/lib\/apache2\/modules\/mod_alias.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 9584 273382 \/usr\/lib\/apache2\/modules\/mod_access_compat.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 13856 131951 \/lib\/i386-linux-gnu\/libdl-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 18036 135656 \/lib\/i386-linux-gnu\/libuuid.so.1.3.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 161156 131956 \/lib\/i386-linux-gnu\/libexpat.so.1.6.0<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 38456 131944 \/lib\/i386-linux-gnu\/libcrypt-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 1754876 131934 \/lib\/i386-linux-gnu\/libc-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 134614 132055 \/lib\/i386-linux-gnu\/libpthread-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 203148 401061 \/usr\/lib\/i386-linux-gnu\/libapr-1.so.0.5.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 157960 401067 \/usr\/lib\/i386-linux-gnu\/libaprutil-1.so.0.5.3<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 247196 131988 \/lib\/i386-linux-gnu\/libpcre.so.3.13.1<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data mem REG 8,1 134380 131908 \/lib\/i386-linux-gnu\/ld-2.19.so<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 0r CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 1w CHR 1,3 0t0 1046 \/dev\/null<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 2w REG 8,1 1429 2103957 \/var\/log\/apache2\/error.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 3u sock 0,7 0t0 14993 can't identify protocol<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 4u IPv6 14994 0t0 TCP *:http (LISTEN)<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 5r FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 6w FIFO 0,8 0t0 14093 pipe<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 7w REG 8,1 0 2103959 \/var\/log\/apache2\/other_vhosts_access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 8w REG 8,1 161 2103958 \/var\/log\/apache2\/access.log<\/span><br \/>\n<span style=\"color: #ff0000;\">apache2 1908 www-data 9u 0000 0,9 0 7813 anon_inode<\/span><\/p>\n<p class=\"command\"><span style=\"color: #0000ff;\">sudo lsof -t -c apache2<\/span><br \/>\n<span style=\"color: #ff0000;\">1904<\/span><br \/>\n<span style=\"color: #ff0000;\">1907<\/span><br \/>\n<span style=\"color: #ff0000;\">1908<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"pvc_clear\"><\/div>\n<p id=\"pvc_stats_2087\" class=\"pvc_stats all  \" data-element-id=\"2087\" style=\"\"><i class=\"pvc-stats-icon medium\" aria-hidden=\"true\"><svg aria-hidden=\"true\" focusable=\"false\" data-prefix=\"far\" data-icon=\"chart-bar\" role=\"img\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" class=\"svg-inline--fa fa-chart-bar fa-w-16 fa-2x\"><path fill=\"currentColor\" d=\"M396.8 352h22.4c6.4 0 12.8-6.4 12.8-12.8V108.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v230.4c0 6.4 6.4 12.8 12.8 12.8zm-192 0h22.4c6.4 0 12.8-6.4 12.8-12.8V140.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v198.4c0 6.4 6.4 12.8 12.8 12.8zm96 0h22.4c6.4 0 12.8-6.4 12.8-12.8V204.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v134.4c0 6.4 6.4 12.8 12.8 12.8zM496 400H48V80c0-8.84-7.16-16-16-16H16C7.16 64 0 71.16 0 80v336c0 17.67 14.33 32 32 32h464c8.84 0 16-7.16 16-16v-16c0-8.84-7.16-16-16-16zm-387.2-48h22.4c6.4 0 12.8-6.4 12.8-12.8v-70.4c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v70.4c0 6.4 6.4 12.8 12.8 12.8z\" class=\"\"><\/path><\/svg><\/i> <img loading=\"lazy\" decoding=\"async\" width=\"16\" height=\"16\" alt=\"Loading\" src=\"https:\/\/stevepedwards.today\/DebianAdmin\/wp-content\/plugins\/page-views-count\/ajax-loader-2x.gif\" border=0 \/><\/p>\n<div class=\"pvc_clear\"><\/div>\n<p>An lsof Primer here for this very powerful tool: https:\/\/danielmiessler.com\/study\/lsof\/ 10 lsof Command Examples in Linux man lsof DESCRIPTION Lsof revision 4.86 lists on its standard output file information about files opened by processes for the following UNIX dialects: Apple Darwin 9 and Mac OS X 10.[567] FreeBSD 4.9 and 6.4 for x86-based systems FreeBSD <a href=\"https:\/\/stevepedwards.today\/DebianAdmin\/cool-command-8-lsof\/\" class=\"more-link\">...<span class=\"screen-reader-text\">\u00a0 Cool Command #8 &#8211; lsof<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-2087","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"a3_pvc":{"activated":true,"total_views":1,"today_views":0},"_links":{"self":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/2087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/comments?post=2087"}],"version-history":[{"count":0,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/2087\/revisions"}],"wp:attachment":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/media?parent=2087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/categories?post=2087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/tags?post=2087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}