DEVICE 指定磁盤(pán)的名稱(chēng)
SIZE 文件的大小
NODE 索引節(jié)點(diǎn)（文件在磁盤(pán)上的標(biāo)識(shí)）
NAME 文件確切名稱(chēng)
打開(kāi)的文件相關(guān)聯(lián)的進(jìn)程
通過(guò)指定文件,可以發(fā)現(xiàn)正在使用這個(gè)文件的進(jìn)程
[root@localhost /]# lsof /var/log/messages
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslogd 4435 root 1w REG 3,1 126045 1249300 /var/log/messages
lsof也可列舉出與特地進(jìn)程相關(guān)聯(lián)到的文件、目錄、庫(kù)等等信息。
[root@localhost /]# lsof -p 4435
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslogd 4435 root cwd DIR 3,1 4096 2 /
syslogd 4435 root rtd DIR 3,1 4096 2 /
syslogd 4435 root txt REG 3,1 32348 292106 /sbin/syslogd
syslogd 4435 root mem REG 3,1 112212 1218034 /lib/ld-2.3.4.so
syslogd 4435 root mem REG 3,1 1543220 1218035 /lib/tls/libc-2.3.4.so
syslogd 4435 root mem REG 3,1 47420 1216850 /lib/libnss_files-2.3.4.so
syslogd 4435 root 0u unix 0xdf363280 6906 /dev/log
syslogd 4435 root 1w REG 3,1 126045 1249300 /var/log/messages
syslogd 4435 root 2w REG 3,1 3471 1249301 /var/log/secure
syslogd 4435 root 3w REG 3,1 1845 1249302 /var/log/maillog
syslogd 4435 root 4w REG 3,1 2484 1250187 /var/log/cron
syslogd 4435 root 5w REG 3,1 0 1249303 /var/log/spooler
syslogd 4435 root 6w REG 3,1 27095 1250188 /var/log/boot.log
通過(guò)進(jìn)程名稱(chēng)來(lái)指定的進(jìn)程查看：
[root@localhost /]# lsof -c init
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
init 1 root cwd DIR 3,1 4096 2 /
init 1 root rtd DIR 3,1 4096 2 /
init 1 root txt REG 3,1 31216 292117 /sbin/init
init 1 root mem REG 3,1 112212 1218034 /lib/ld-2.3.4.so
init 1 root mem REG 3,1 1543220 1218035 /lib/tls/libc-2.3.4.so
init 1 root mem REG 3,1 53736 1216905 /lib/libsepol.so.1
init 1 root mem REG 3,1 56336 1218047 /lib/libselinux.so.1
init 1 root 10u FIFO 0,13 1025 /dev/initctl
列出當(dāng)前端口服務(wù)程序名稱(chēng)
[root@localhost /]# lsof -i:22
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
sshd 4695 root 3u IPv6 7420 TCP *:ssh (LISTEN)
列出當(dāng)前網(wǎng)絡(luò)服務(wù)
[root@localhost /]# lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
portmap 4469 rpc 3u IPv4 6956 UDP *:sunrpc
portmap 4469 rpc 4u IPv4 6959 TCP *:sunrpc (LISTEN)
rpc.statd 4489 rpcuser 5u IPv4 6984 UDP *:849
rpc.statd 4489 rpcuser 6u IPv4 6991 UDP *:852
rpc.statd 4489 rpcuser 8u IPv4 6994 TCP *:855 (LISTEN)
cupsd 4618 root 0u IPv4 7348 TCP localhost.localdomain:ipp (LISTEN)
cupsd 4618 root 2u IPv4 7349 UDP *:ipp
sshd 4695 root 3u IPv6 7420 TCP *:ssh (LISTEN)
xinetd 4710 root 5u IPv4 7499 TCP *:telnet (LISTEN)
sendmail 4729 root 4u IPv4 7521 TCP localhost.localdomain:smtp (LISTEN)
in.telnet 5547 root 0u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLISHED)
in.telnet 5547 root 1u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLISHED)
in.telnet 5547 root 2u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLISHED)
列出遠(yuǎn)程主機(jī)的所有網(wǎng)絡(luò)連接
[root@localhost /]# lsof -i@192.168.1.90
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
in.telnet 5547 root 0u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLIHED)
in.telnet 5547 root 1u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLIHED)
in.telnet 5547 root 2u IPv4 9347 TCP 192.168.1.90:telnet->192.168.1.11:1954 (ESTABLIHED)
