List accessed files by a process
To list all files, sockets, ports accessed/used by a process you can use lsof. First find the pid of process.
[root@m ~]# ps -ax | grep httpd 6360 ? S 0:00 /usr/sbin/httpd -DFOREGROUND 7129 pts/6 S+ 0:00 grep --color=auto httpd 27003 ? Ss 0:03 /usr/sbin/httpd -DFOREGROUND 30813 ? S 0:04 /usr/sbin/httpd -DFOREGROUND 31015 ? S 0:00 /usr/sbin/httpd -DFOREGROUND 31202 ? S 0:08 /usr/sbin/httpd -DFOREGROUND 31221 ? S 0:00 /usr/sbin/httpd -DFOREGROUND 31241 ? S 0:03 /usr/sbin/httpd -DFOREGROUND 31291 ? S 0:00 /usr/sbin/httpd -DFOREGROUND 31328 ? S 0:03 /usr/sbin/httpd -DFOREGROUND 31588 ? S 0:00 /usr/sbin/httpd -DFOREGROUND 32438 ? S 0:00 /usr/sbin/httpd -DFOREGROUND
And use that pid to view details of process with lsof
[root@markorot ~]# lsof -np 6360 lsof: WARNING: can't stat() fuse.gvfsd-fuse file system /run/user/1000/gvfs Output information may be incomplete. COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME httpd 6360 apache cwd DIR 253,1 4096 192 / httpd 6360 apache rtd DIR 253,1 4096 192 / httpd 6360 apache txt REG 253,1 502800 5635240 /usr/sbin/httpd httpd 6360 apache mem REG 253,1 57952 2690900 /usr/lib64/libzip.so.2.1.0 httpd 6360 apache mem REG 253,1 58384 140404816 /usr/lib64/php/modules/zip.so httpd 6360 apache mem REG 253,1 19384 1999 /usr/lib64/libgpg-error.so.0.10.0 httpd 6360 apache mem REG 253,1 513008 2045 /usr/lib64/libgcrypt.so.11.8.2 httpd 6360 apache mem REG 253,1 258344 1490893 /usr/lib64/libxslt.so.1.1.28 httpd 6360 apache mem REG 253,1 87368 1490891 /usr/lib64/libexslt.so.0.8.17 httpd 6360 apache mem REG 253,1 37104 140404827 /usr/lib64/php/modules/xsl.so httpd 6360 apache mem REG 253,1 49152 140404826 /usr/lib64/php/modules/xmlwriter.so httpd 6360 apache mem REG 253,1 32888 140404825 /usr/lib64/php/modules/xmlreader.so httpd 6360 apache mem REG 253,1 36728 140404824 /usr/lib64/php/modules/wddx.so httpd 6360 apache mem REG 253,1 397112 2690898 /usr/lib64/libtidy-0.99.so.0.0.0 httpd 6360 apache mem REG 253,1 53888 140404828 /usr/lib64/php/modules/tidy.so httpd 6360 apache mem REG 253,1 15720 141039970 /usr/lib64/php/modules/sysvshm.so httpd 6360 apache mem REG 253,1 11496 141039969 /usr/lib64/php/modules/sysvsem.so httpd 6360 apache mem REG 253,1 19880 141039968 /usr/lib64/php/modules/sysvmsg.so httpd 6360 apache mem REG 253,1 51336 140404848 /usr/lib64/php/modules/sqlite3.so httpd 6360 apache mem REG 253,1 343776 141495481 /usr/lib64/php/modules/soap.so httpd 6360 apache mem REG 253,1 32888 141039967 /usr/lib64/php/modules/posix.so httpd 6360 apache mem REG 253,1 271960 140404815 /usr/lib64/php/modules/phar.so httpd 6360 apache mem REG 253,1 753200 2047 /usr/lib64/libsqlite3.so.0.8.6 httpd 6360 apache mem REG 253,1 29168 140404847 /usr/lib64/php/modules/pdo_sqlite.so httpd 6360 apache mem REG 253,1 33168 140404851 /usr/lib64/php/modules/pdo_mysql.so httpd 6360 apache mem REG 253,1 116296 140404846 /usr/lib64/php/modules/pdo.so httpd 6360 apache mem REG 253,1 146016 140404850 /usr/lib64/php/modules/mysqli.so httpd 6360 apache mem REG 253,1 991744 1725 /usr/lib64/libstdc++.so.6.0.19 httpd 6360 apache mem REG 253,1 3133520 201462835 /usr/lib64/mysql/libmysqlclient.so.18.0.0 httpd 6360 apache mem REG 253,1 57912 140404849 /usr/lib64/php/modules/mysql.so httpd 6360 apache mem REG 253,1 187952 42685 /usr/lib64/libmcrypt.so.4.4.8 httpd 6360 apache mem REG 253,1 48960 140404829 /usr/lib64/php/modules/mcrypt.so httpd 6360 apache mem REG 253,1 1305696 140404817 /usr/lib64/php/modules/mbstring.so httpd 6360 apache mem REG 253,1 44680 140404814 /usr/lib64/php/modules/json.so httpd 6360 apache mem REG 253,1 114624 1825 /usr/lib64/libaudit.so.1.0.0 httpd 6360 apache mem REG 253,1 61648 58833 /usr/lib64/libpam.so.0.83.1 httpd 6360 apache mem REG 253,1 1122008 6070326 /usr/lib64/libc-client.so.2007 httpd 6360 apache mem REG 253,1 102776 141495426 /usr/lib64/php/modules/imap.so httpd 6360 apache mem REG 253,1 51400 1850049 /usr/lib64/libjbig.so.2.0 httpd 6360 apache mem REG 253,1 88720 812344 /usr/lib64/libgcc_s-4.8.2-20140120.so.1 httpd 6360 apache mem REG 253,1 92864 2702 /usr/lib64/libgomp.so.1.0.0 httpd 6360 apache mem REG 253,1 100472 817654 /usr/lib64/libICE.so.6.3.0 httpd 6360 apache mem REG 253,1 32320 812749 /usr/lib64/libSM.so.6.0.1 httpd 6360 apache mem REG 253,1 41248 1490673 /usr/lib64/libltdl.so.7.3.0 httpd 6360 apache mem REG 253,1 424464 1169660 /usr/lib64/libXt.so.6.0.0 httpd 6360 apache mem REG 253,1 75856 1169631 /usr/lib64/libXext.so.6.4.0 httpd 6360 apache mem REG 253,1 251800 1169791 /usr/lib64/libfontconfig.so.1.7.0 httpd 6360 apache mem REG 253,1 475288 1850057 /usr/lib64/libtiff.so.5.2.0 httpd 6360 apache mem REG 253,1 2677064 2697510 /usr/lib64/libMagickCore.so.5.0.0 httpd 6360 apache mem REG 253,1 1140704 2697512 /usr/lib64/libMagickWand.so.5.0.0 httpd 6360 apache mem REG 253,1 417688 141495468 /usr/lib64/php/modules/imagick.so httpd 6360 apache mem REG 253,1 197064 7039322 /usr/lib64/libGeoIP.so.1.5.0 httpd 6360 apache mem REG 253,1 20304 141495467 /usr/lib64/php/modules/geoip.so httpd 6360 apache mem REG 253,1 15512 817658 /usr/lib64/libXau.so.6.0.0 httpd 6360 apache mem REG 253,1 136904 812743 /usr/lib64/libxcb.so.1.1.0 httpd 6360 apache mem REG 253,1 285296 1169372 /usr/lib64/libjpeg.so.62.1.0 httpd 6360 apache mem REG 253,1 179248 817645 /usr/lib64/libpng15.so.15.13.0 httpd 6360 apache mem REG 253,1 74480 2387214 /usr/lib64/libXpm.so.4.11.0 httpd 6360 apache mem REG 253,1 1318888 1169629 /usr/lib64/libX11.so.6.3.0 httpd 6360 apache mem REG 253,1 687608 3001 /usr/lib64/libfreetype.so.6.10.0 httpd 6360 apache mem REG 253,1 299824 2355384 /usr/lib64/libt1.so.5.1.2 httpd 6360 apache mem REG 253,1 345056 140404822 /usr/lib64/php/modules/gd.so httpd 6360 apache mem REG 253,1 2713352 140404813 /usr/lib64/php/modules/fileinfo.so httpd 6360 apache mem REG 253,1 176512 140404823 /usr/lib64/php/modules/dom.so httpd 6360 apache mem REG 253,1 121296 2663 /usr/lib64/libsasl2.so.3.0.0 httpd 6360 apache mem REG 253,1 340144 4809 /usr/lib64/libldap-2.4.so.2.10.2 httpd 6360 apache mem REG 253,1 62800 4807 /usr/lib64/liblber-2.4.so.2.10.2 httpd 6360 apache mem REG 253,1 251824 1655 /usr/lib64/libnspr4.so httpd 6360 apache mem REG 253,1 20016 1656 /usr/lib64/libplc4.so httpd 6360 apache mem REG 253,1 15776 1657 /usr/lib64/libplds4.so httpd 6360 apache mem REG 253,1 182008 1707 /usr/lib64/libnssutil3.so httpd 6360 apache mem REG 253,1 1215920 343972 /usr/lib64/libnss3.so httpd 6360 apache mem REG 253,1 164016 343974 /usr/lib64/libsmime3.so httpd 6360 apache mem REG 253,1 259968 343975 /usr/lib64/libssl3.so httpd 6360 apache mem REG 253,1 174072 204375 /usr/lib64/libssh2.so.1.0.1 httpd 6360 apache mem REG 253,1 208928 2488 /usr/lib64/libidn.so.11.6.11 httpd 6360 apache mem REG 253,1 422680 204377 /usr/lib64/libcurl.so.4.3.0 httpd 6360 apache mem REG 253,1 74648 140404812 /usr/lib64/php/modules/curl.so httpd 6360 apache mem REG 253,1 32568 140404830 /usr/lib64/php/modules/bcmath.so httpd 6360 apache mem REG 253,1 27512 1630 /usr/lib64/libnss_dns-2.17.so httpd 6360 apache mem REG 253,1 58288 1632 /usr/lib64/libnss_files-2.17.so httpd 6360 apache mem REG 253,1 15688 2803 /usr/lib64/libkeyutils.so.1.5 httpd 6360 apache mem REG 253,1 58480 4793 /usr/lib64/libkrb5support.so.0.1 httpd 6360 apache mem REG 253,1 2004600 2834 /usr/lib64/libcrypto.so.1.0.1e httpd 6360 apache mem REG 253,1 445640 4796 /usr/lib64/libssl.so.1.0.1e httpd 6360 apache mem REG 253,1 15840 1906 /usr/lib64/libcom_err.so.2.1 httpd 6360 apache mem REG 253,1 214816 4781 /usr/lib64/libk5crypto.so.3.1 httpd 6360 apache mem REG 253,1 929144 4791 /usr/lib64/libkrb5.so.3.3 httpd 6360 apache mem REG 253,1 308008 4777 /usr/lib64/libgssapi_krb5.so.2.2 httpd 6360 apache mem REG 253,1 1505240 818266 /usr/lib64/libxml2.so.2.9.1 httpd 6360 apache mem REG 253,1 113320 1624 /usr/lib64/libnsl-2.17.so httpd 6360 apache mem REG 253,1 68192 1914 /usr/lib64/libbz2.so.1.0.6 httpd 6360 apache mem REG 253,1 491928 2502 /usr/lib64/libgmp.so.10.1.1 httpd 6360 apache mem REG 253,1 110808 1664 /usr/lib64/libresolv-2.17.so httpd 6360 apache mem REG 253,1 4592464 205326337 /usr/lib64/httpd/modules/libphp5.so httpd 6360 apache mem REG 253,1 27696 205326369 /usr/lib64/httpd/modules/mod_cgi.so httpd 6360 apache mem REG 253,1 44048 1667 /usr/lib64/librt-2.17.so httpd 6360 apache mem REG 253,1 15216 1711 /usr/lib64/libsystemd-daemon.so.0.0.10 httpd 6360 apache mem REG 253,1 11096 205326080 /usr/lib64/httpd/modules/mod_systemd.so httpd 6360 apache mem REG 253,1 19448 205326061 /usr/lib64/httpd/modules/mod_proxy_scgi.so httpd 6360 apache mem REG 253,1 39928 205326060 /usr/lib64/httpd/modules/mod_proxy_http.so httpd 6360 apache mem REG 253,1 44168 205326059 /usr/lib64/httpd/modules/mod_proxy_ftp.so httpd 6360 apache mem REG 253,1 11136 205326058 /usr/lib64/httpd/modules/mod_proxy_fdpass.so httpd 6360 apache mem REG 253,1 19360 205326057 /usr/lib64/httpd/modules/mod_proxy_fcgi.so httpd 6360 apache mem REG 253,1 15272 205326056 /usr/lib64/httpd/modules/mod_proxy_express.so httpd 6360 apache mem REG 253,1 19384 205326055 /usr/lib64/httpd/modules/mod_proxy_connect.so httpd 6360 apache mem REG 253,1 48160 205326054 /usr/lib64/httpd/modules/mod_proxy_balancer.so httpd 6360 apache mem REG 253,1 52416 205326053 /usr/lib64/httpd/modules/mod_proxy_ajp.so httpd 6360 apache mem REG 253,1 15304 205326395 /usr/lib64/httpd/modules/mod_lbmethod_heartbeat.so httpd 6360 apache mem REG 253,1 11112 205326394 /usr/lib64/httpd/modules/mod_lbmethod_bytraffic.so httpd 6360 apache mem REG 253,1 11112 205326393 /usr/lib64/httpd/modules/mod_lbmethod_byrequests.so httpd 6360 apache mem REG 253,1 11120 205326392 /usr/lib64/httpd/modules/mod_lbmethod_bybusyness.so httpd 6360 apache mem REG 253,1 110472 205326052 /usr/lib64/httpd/modules/mod_proxy.so httpd 6360 apache mem REG 253,1 31864 205326049 /usr/lib64/httpd/modules/mod_mpm_prefork.so httpd 6360 apache mem REG 253,1 1141552 1622 /usr/lib64/libm-2.17.so httpd 6360 apache mem REG 253,1 193808 2176 /usr/lib64/liblua-5.1.so httpd 6360 apache mem REG 253,1 117088 203433276 /usr/lib64/httpd/modules/mod_lua.so httpd 6360 apache mem REG 253,1 19616 205326375 /usr/lib64/httpd/modules/mod_dav_lock.so httpd 6360 apache mem REG 253,1 57088 205326374 /usr/lib64/httpd/modules/mod_dav_fs.so httpd 6360 apache mem REG 253,1 102368 205326373 /usr/lib64/httpd/modules/mod_dav.so httpd 6360 apache mem REG 253,1 15264 205326086 /usr/lib64/httpd/modules/mod_vhost_alias.so httpd 6360 apache mem REG 253,1 11088 205326085 /usr/lib64/httpd/modules/mod_version.so httpd 6360 apache mem REG 253,1 11160 205326083 /usr/lib64/httpd/modules/mod_userdir.so httpd 6360 apache mem REG 253,1 15296 205326082 /usr/lib64/httpd/modules/mod_unixd.so httpd 6360 apache mem REG 253,1 11128 205326081 /usr/lib64/httpd/modules/mod_unique_id.so httpd 6360 apache mem REG 253,1 11160 205326079 /usr/lib64/httpd/modules/mod_suexec.so httpd 6360 apache mem REG 253,1 15256 205326078 /usr/lib64/httpd/modules/mod_substitute.so httpd 6360 apache mem REG 253,1 23448 205326077 /usr/lib64/httpd/modules/mod_status.so httpd 6360 apache mem REG 253,1 23552 205326075 /usr/lib64/httpd/modules/mod_socache_shmcb.so httpd 6360 apache mem REG 253,1 11176 205326074 /usr/lib64/httpd/modules/mod_socache_memcache.so httpd 6360 apache mem REG 253,1 15312 205326073 /usr/lib64/httpd/modules/mod_socache_dbm.so httpd 6360 apache mem REG 253,1 15392 205326072 /usr/lib64/httpd/modules/mod_slotmem_shm.so httpd 6360 apache mem REG 253,1 11224 205326071 /usr/lib64/httpd/modules/mod_slotmem_plain.so httpd 6360 apache mem REG 253,1 15312 205326070 /usr/lib64/httpd/modules/mod_setenvif.so httpd 6360 apache mem REG 253,1 69024 205326068 /usr/lib64/httpd/modules/mod_rewrite.so httpd 6360 apache mem REG 253,1 15304 205326066 /usr/lib64/httpd/modules/mod_reqtimeout.so httpd 6360 apache mem REG 253,1 15288 205326065 /usr/lib64/httpd/modules/mod_remoteip.so httpd 6360 apache mem REG 253,1 35992 205326051 /usr/lib64/httpd/modules/mod_negotiation.so httpd 6360 apache mem REG 253,1 23608 203970151 /usr/lib64/httpd/modules/mod_mime.so httpd 6360 apache mem REG 253,1 27720 203970152 /usr/lib64/httpd/modules/mod_mime_magic.so httpd 6360 apache mem REG 253,1 11208 205326399 /usr/lib64/httpd/modules/mod_logio.so httpd 6360 apache mem REG 253,1 28184 205326396 /usr/lib64/httpd/modules/mod_log_config.so httpd 6360 apache mem REG 253,1 28104 205326391 /usr/lib64/httpd/modules/mod_info.so httpd 6360 apache mem REG 253,1 52512 205326390 /usr/lib64/httpd/modules/mod_include.so httpd 6360 apache mem REG 253,1 23736 205326387 /usr/lib64/httpd/modules/mod_headers.so httpd 6360 apache mem REG 253,1 19408 205326386 /usr/lib64/httpd/modules/mod_filter.so httpd 6360 apache mem REG 253,1 23536 205326384 /usr/lib64/httpd/modules/mod_ext_filter.so httpd 6360 apache mem REG 253,1 15304 205326383 /usr/lib64/httpd/modules/mod_expires.so httpd 6360 apache mem REG 253,1 11160 205326382 /usr/lib64/httpd/modules/mod_env.so httpd 6360 apache mem REG 253,1 11152 205326381 /usr/lib64/httpd/modules/mod_echo.so httpd 6360 apache mem REG 253,1 11176 205326380 /usr/lib64/httpd/modules/mod_dumpio.so httpd 6360 apache mem REG 253,1 15256 205326379 /usr/lib64/httpd/modules/mod_dir.so httpd 6360 apache mem REG 253,1 90632 1822 /usr/lib64/libz.so.1.2.7 httpd 6360 apache mem REG 253,1 31816 205326377 /usr/lib64/httpd/modules/mod_deflate.so httpd 6360 apache mem REG 253,1 23616 205326376 /usr/lib64/httpd/modules/mod_dbd.so httpd 6360 apache mem REG 253,1 11080 205326372 /usr/lib64/httpd/modules/mod_data.so httpd 6360 apache mem REG 253,1 36080 205326367 /usr/lib64/httpd/modules/mod_cache_disk.so httpd 6360 apache mem REG 253,1 77344 205326366 /usr/lib64/httpd/modules/mod_cache.so httpd 6360 apache mem REG 253,1 40056 205326364 /usr/lib64/httpd/modules/mod_autoindex.so httpd 6360 apache mem REG 253,1 7024 205326363 /usr/lib64/httpd/modules/mod_authz_user.so httpd 6360 apache mem REG 253,1 11128 205326362 /usr/lib64/httpd/modules/mod_authz_owner.so httpd 6360 apache mem REG 253,1 11168 205326361 /usr/lib64/httpd/modules/mod_authz_host.so httpd 6360 apache mem REG 253,1 11168 205326360 /usr/lib64/httpd/modules/mod_authz_groupfile.so httpd 6360 apache mem REG 253,1 11176 205326359 /usr/lib64/httpd/modules/mod_authz_dbm.so httpd 6360 apache mem REG 253,1 15288 205326358 /usr/lib64/httpd/modules/mod_authz_dbd.so httpd 6360 apache mem REG 253,1 23720 205326357 /usr/lib64/httpd/modules/mod_authz_core.so httpd 6360 apache mem REG 253,1 19536 205326356 /usr/lib64/httpd/modules/mod_authn_socache.so httpd 6360 apache mem REG 253,1 11152 205326355 /usr/lib64/httpd/modules/mod_authn_file.so httpd 6360 apache mem REG 253,1 11176 205326354 /usr/lib64/httpd/modules/mod_authn_dbm.so httpd 6360 apache mem REG 253,1 15256 205326353 /usr/lib64/httpd/modules/mod_authn_dbd.so httpd 6360 apache mem REG 253,1 15344 205326352 /usr/lib64/httpd/modules/mod_authn_core.so httpd 6360 apache mem REG 253,1 11136 205326351 /usr/lib64/httpd/modules/mod_authn_anon.so httpd 6360 apache mem REG 253,1 36048 205326350 /usr/lib64/httpd/modules/mod_auth_digest.so httpd 6360 apache mem REG 253,1 15320 205326349 /usr/lib64/httpd/modules/mod_auth_basic.so httpd 6360 apache mem REG 253,1 11128 205326347 /usr/lib64/httpd/modules/mod_allowmethods.so httpd 6360 apache mem REG 253,1 15352 205326346 /usr/lib64/httpd/modules/mod_alias.so httpd 6360 apache mem REG 253,1 11152 205326345 /usr/lib64/httpd/modules/mod_actions.so httpd 6360 apache mem REG 253,1 11200 205326344 /usr/lib64/httpd/modules/mod_access_compat.so httpd 6360 apache mem REG 253,1 502040 1203 /usr/lib64/libfreebl3.so httpd 6360 apache mem REG 253,1 20032 1831 /usr/lib64/libuuid.so.1.3.0 httpd 6360 apache mem REG 253,1 153184 1724 /usr/lib64/liblzma.so.5.0.99 httpd 6360 apache mem REG 253,1 2107600 1614 /usr/lib64/libc-2.17.so httpd 6360 apache mem REG 253,1 19512 1620 /usr/lib64/libdl-2.17.so httpd 6360 apache mem REG 253,1 141616 1662 /usr/lib64/libpthread-2.17.so httpd 6360 apache mem REG 253,1 198600 5635062 /usr/lib64/libapr-1.so.0.4.8 httpd 6360 apache mem REG 253,1 1846280 4900 /usr/lib64/libdb-5.3.so httpd 6360 apache mem REG 253,1 173288 1997 /usr/lib64/libexpat.so.1.6.0 httpd 6360 apache mem REG 253,1 40816 1618 /usr/lib64/libcrypt-2.17.so httpd 6360 apache mem REG 253,1 172288 5635064 /usr/lib64/libaprutil-1.so.0.5.2 httpd 6360 apache mem REG 253,1 147120 1819 /usr/lib64/libselinux.so.1 httpd 6360 apache mem REG 253,1 398264 1803 /usr/lib64/libpcre.so.1.2.0 httpd 6360 apache mem REG 253,1 160240 1607 /usr/lib64/ld-2.17.so httpd 6360 apache DEL REG 0,4 3784057 /dev/zero httpd 6360 apache DEL REG 0,4 832438288 /SYSV0112bd72 httpd 6360 apache 0r CHR 1,3 0t0 1028 /dev/null httpd 6360 apache 1u unix 0xffff880491d9d500 0t0 3784775 socket httpd 6360 apache 2w REG 253,1 95622 8326764 /var/log/httpd/error_log httpd 6360 apache 3u sock 0,7 0t0 3784778 protocol: TCP httpd 6360 apache 4u IPv6 3784779 0t0 TCP *:http (LISTEN) httpd 6360 apache 5r FIFO 0,8 0t0 3784049 pipe httpd 6360 apache 6w FIFO 0,8 0t0 3784049 pipe httpd 6360 apache 7w REG 253,1 11845300 8326761 /var/log/httpd/access_log httpd 6360 apache 8u a_inode 0,9 0 6936 [eventpoll]
Categories: linux
lsof, process files
Comments (0)
Trackbacks (0)
Leave a comment
Trackback