Linux lsof v4.91英本文档：详解与查阅指南

需积分: 9 165 浏览量更新于2024-07-17 收藏 220KB PDF 举报

"《Linux lsof v4.91手册：系统管理员指南》本资源是Linux系统下lsof工具的v4.91版本英文man手册，提供了详细的命令行解释、功能介绍和用法指导。lsof（List of Open Files）是一个实用的系统监控工具，用于查看当前系统中哪些进程或线程正在使用哪些文件或资源，这对于诊断问题、资源管理以及理解系统运行状态极其有用。 1. **目录结构**: 手册首先列出了各个章节，包括NAME（介绍）、SYNOPSIS（基本命令格式）、DESCRIPTION（概述用途）、OPTIONS（详尽的选项列表及其描述），以及针对不同操作系统（如AIX、Linux和Solaris）的特定支持部分。 2. **选项详解**: - `-h`：提供基本的帮助信息，但可能由于篇幅限制，自带的帮助相对简略。 - `-a`：显示所有类型的文件，而不仅仅是打开的文件。 - `-AA` 和 `-b`：用于显示附加的文件属性，如设备名和特殊文件类型。 - `-c`、`-C`、`-d`等选项分别涉及进程、内存映射、socket等不同维度的文件描述符操作。 - `-f`、`-g`、`-i`等选项允许用户根据文件类型（如文件、套接字、管道等）进行筛选。 3. **输出格式**: 手册详细介绍了输出结果的组成，如进程标识（PID、TID）、任务命令（TASKCMD）、安全上下文（SECURITY-CONTEXT）等，以及各种元数据如文件地址、大小、链接数等。 4. **安全性与权限**: 提供了关于lsof如何处理安全性和访问控制的信息，强调了不同选项对于文件缓存路径设置的影响，以及可能影响设备缓存文件访问的权限设置。 5. **其他功能与注意事项**: - AFS（Andrew File System）支持、避免内核块的技巧、设备号替换、以及使用环境变量来获取设备缓存路径等高级用法也在手册中有所涉及。 6. **命令行示例与使用场景**: 除了理论说明，手册还给出了实际命令的执行示例，帮助用户理解如何在日常管理和故障排查中运用lsof。《Linux lsof v4.91手册》是一个不可或缺的参考资源，它详细解释了如何通过lsof工具深入了解系统的文件使用情况，无论是系统管理员还是开发者，在进行系统维护、性能优化或问题定位时，都可以从中获得有价值的信息。对于想要熟练掌握和使用lsof的人来说，这份手册提供了全面的指导。"

device; the second, for a slave device. min is a slave device's minor de vice

number; and PID, cmd, FD and mode are the same as with pipe endpoint information.

Note: psudoterminal endpoint information is only available when the compile flags

line of -V output contains HASPTYEPT.

UNIX socket file endpoint information is displayed in the NAME column in the

form ''type=TYPE ->INO=INODE PID,cmd,FDmode'', where TYPE is the socket type;

INODE is the i-node number of the connected socket; and PID, cmd, FD and mode are

the same as with pipe endpoint information. Note: UNIX socket file endpoint in

formation is available only when the compile flags line of -v output contains

HASUXSOCKEPT.

Multiple occurrences of this information can appear in a file's NAME column.

-E specfies that Linux pipe and Linux UNIX socket files should be displayed

with endpoint information, but not the files of the endpoints.

+|-f [cfgGn]

f by itself clarifies how path name arguments are to be interpreted. When

followed by c, f, g, G, or n in any combination it specifies that the listing of

kernel file structure information is to be enabled ('+') or inhibited ('-').

Normally a path name argument is taken to be a file system name if it matches

a mounted-on directory name reported by mount(8), or if it represents a block

device, named in the mount output and associated with a mounted directory name.

When +f is specified, all path name arguments will be taken to be file system

names, and lsof will complain if any are not. This can be useful, for example,

when the file system name (mounted-on device) isn't a block device.

This happens for some CD-ROM file systems.

When -f is specified by itself, all path name arguments will be taken to

be simple files. Thus, for example, the ''-f -- /'' arguments direct lsof to

search for open files with a '/' path name, not all open files in the '/' (root)

file system.

Be careful to make sure +f and -f are properly terminated and aren't followed

by a character (e.g., of the file or file system name) that might be taken as a

parameter. For example, use ''--'' after +f and -f as in these examples.

$ lsof +f -- /file/system/name

$ lsof -f -- /file/name

The listing of information from kernel file structures, requested with the +f

[cfgGn] option form, is normally inhibited, and is not available in whole or part

for some dialects - e.g., /proc-based Linux kernels below 2.6.22.

When the prefix to f is a plus sign ('+'), these characters request file

structure information:

c file structure use count (not Linux)

f file structure address (not Linux)

g file flag abbreviations (Linux 2.6.22 and up)

G file flags in hexadecimal (Linux 2.6.22 and up)

n file structure node address (not Linux)

When the prefix is minus ('-') the same characters disable the listing of the

indicated values.

File structure addresses, use counts, flags, and node addresses may be

used to detect more readily identical files inherited by child processes and

identical files in use by different processes. Lsof column output can be sorted

by output columns holding the values and listed to identify identical file use, or

lsof field output can be parsed by an AWK or Perl post-filter script, or by a C

program.

-F f

specifies a character list, f, that selects the fields to be output for processing

by another program, and the character that terminates each output field. Each

field to be output is specified with a single character in f.

The fieldterminator defaults to NL, but may be changed to NUL (000). See the

OUTPUT FOR OTHER PROGRAMS section for a description of the field identification

characters and the field output process.

When the field selection character list is empty, all standard fields are

selected (except the raw device field, security context and zone field for

compatibility reasons) and the NL field terminator is used.

When the field selection character list contains only a zero ('0'), all fields

are selected (except the raw device field for compatibility reasons) and the NUL

terminator character is used.

Other combinations of fields and their associated field terminator character

must be set with explicit entries in f, as described in the OUTPUT FOR OTHER

PROGRAMS section.

When a field selection character identifies an item lsof does not normally

list - e.g., PPID, selected with -R - specification of the field character - e.g.,

''-FR'' - also selects the listing of the item.

When the field selection character list contains the single character '?',

lsof will display a help list of the field identification characters. (Escape the

'?' character as your shell requires.)

-g [s]

excludes or selects the listing of files for the processes whose optional process

group IDentification (PGID) numbers are in the comma-separated set s - e.g.,

''123'' or ''123,^456''. (There should be no spaces in the set.)

PGID numbers that begin with '^' (negation) represent exclusions.

Multiple PGID numbers are joined in a single ORed set before participating in

AND option selection. However, PGID exclusions are applied without ORing or

ANDing and take effect before other selection criteria are applied.

The -g option also enables the output display of PGID numbers. When specified

without a PGID set that's all it does.

-i [i]

selects the listing of files any of whose Internet address matches the address

specified in i. If no address is specified, this option selects the listing of

all Internet and x.25 (HP-UX) network files.

剩余46页未读，继续阅读

sztomarch

粉丝: 153
资源: 9

Linux lsof v4.91英本文档：详解与查阅指南

man-lsof-cn-v4.91.pdf

lsof-4.87-6.el7.x86_64.rpm

前端开源库-lsof

another-lsof:使用C ++模拟lsof

centos7 查看端口是否被占用 lsof-4.87-6.el7.x86-64.rpm.7z

lsof-4.61-4.aix5.3.ppc.rpm

lsof-4.80.tar.gz

lsof-4.82-5.el6.x86_64.rpm

lsof-4.82-4.el6.x86_64.rpm

最新资源