Sponsored Content
Full Discussion: Find and lsof
Top Forums Shell Programming and Scripting Find and lsof Post 302287999 by Arunprasad on Monday 16th of February 2009 07:35:47 AM
Old 02-16-2009
Java

Hi gauravacl,

PID is "1425492", and now i want to find the exact file which is bigger in size and also it is opened by the process id. But when i tried your option i am getting the output as below,

myserv123>lsof -p 1425492
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
sas 1425492 ampsys cwd VDIR 46,42001 0 4043309312 /home/usr/SAS/IntTech (/dev/vx/dsk/)
sas 1425492 ampsys 0r VCHR 2,2 0t0 16628 /dev/null
sas 1425492 ampsys 1w FIFO 0xf1000100b2a35eb0 0
sas 1425492 ampsys 2w FIFO 0xf1000100b2a35eb0 0
sas 1425492 ampsys 3u IPv4 0xf10002000cabc398 0t0 TCP *:* (CLOSED)
sas 1425492 ampsys 5u unix 0xf10002000cbc7008 0t0 ->0xf10002000142c408
sas 1425492 rampsys 8u unix 0xf10002000ce2d808 0t0 ->0xf10002000d809008

I can see many lines, i want the file which growing faster or the bigger one, which belongs to the process id.

My Problem and target is:
Have to find the biggest file or fastly growing file in the file system and from that take the process id and the file name (with complete path). Then my action is to send a mail to corresponding user and have to kill the process by process id and have to remove the file (bigger or growing one which belongs to the process id).
 

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

lsof output

I have a number of open files connecting to the rpcbind process running on HPUX 11.00. Usinf lsof -p rpcbind I am unable to identify the ip addresses of the open files. Example of one below - Any ideas? rpcbind 19754 root 100u inet 72,0x72 0t0 TCP 79.60.53.40:* (BOUND) (2 Replies)
Discussion started by: Malcolmm
2 Replies

2. Filesystems, Disks and Memory

lsof

Could someone please give me a step for a hint on which version and where is the above utility is for version 4.3.3.0 of Aix. (1 Reply)
Discussion started by: jacl
1 Replies

3. UNIX for Dummies Questions & Answers

lsof ???

Hi All, I'm having a problem with "lsof" in HP-UX system. Its giving me 2 two different results when running it. 1 . lsof -p 'PID' | wc -l -----gives some value 2 . lsof | grep 'PID' | wc -l The above two commands gives me two different values with the same PID...... Thanks (6 Replies)
Discussion started by: marc
6 Replies

4. HP-UX

lsof equivalent in HP-UX

I need lsof equivalent in HP-UX. I do not want to add lsof utility separately. (1 Reply)
Discussion started by: deo_kaustubh
1 Replies

5. Shell Programming and Scripting

How to link lsof and find cmd?

Hi All, My target is to find the biggest files opened by any process and from that i have to find process id and the corresponding file also to avoid file system being hung-up. Finding the process id: is to kill the process Finding the biggest file: is to remove the file To get the process... (0 Replies)
Discussion started by: Arunprasad
0 Replies

6. UNIX for Advanced & Expert Users

lsof and have to find file, pid

Hi All, My target is to find the biggest files opened by any process and from that i have to find process id and the corresponding file also. To get the process id which is accessing the biggest file in the given file system, i am using the below command. pid=`lsof -s /home/arun/my_work |... (4 Replies)
Discussion started by: Arunprasad
4 Replies

7. UNIX for Dummies Questions & Answers

lsof

I'm looking to list all of the files open at a certain time up on a UNIX box. From looking on the internet, it looks as though lsof is the most common. However have tried this and got the following: ksh: lsof: not found Now having gone into bash mode and hit tab twice I see that lsof... (3 Replies)
Discussion started by: meevagh
3 Replies

8. UNIX for Dummies Questions & Answers

about lsof

Hi, I typed lsof -i :80 in my putty but i am not able to get sockets related to port 80 Can any one help me out soon Can anyone point out the reason for not able to get the related sockets Output of what i am getting in my putty is displayed below training@use:~> lsof -i :80... (4 Replies)
Discussion started by: satheeshkr_cse
4 Replies

9. HP-UX

lsof in HP-UX

In Linux and Solaris lsof accepts the -X switch which allows to see if deleted files are still in use and eat disk space. In HP-UX it is now working and it is a problem... today one of my filesystems on the server was increasing very fast but existing file sizes were not really changing. lsof shows... (3 Replies)
Discussion started by: Vorb
3 Replies

10. OS X (Apple)

Lsof output

This is abridged lsof output from my safari process: Safari 13063 owner 9u unix 0x982ef3b9c1be1293 0t0 ->0x982ef3b9b7534eab Safari 13063 owner 10u unix 0x982ef3b9c1be0933 0t0 ->0x982ef3b9c1be1423 Safari 13063 owner 11u unix 0x982ef3b9c1be1423 ... (1 Reply)
Discussion started by: sakurashinken
1 Replies
PS(1)							      General Commands Manual							     PS(1)

NAME
ps - process status SYNOPSIS
ps [ acgklnrtuwxU# [ core [ swap [ system ] ] ] ] DESCRIPTION
Ps prints certain indicia about active processes. To get a complete printout on the console or lpr, use ``ps axlw'' For a quick snapshot of system activity, ``ps au'' is recommended. A hyphen may precede options with no effect. The following options may be specified. a asks for information about all processes with terminals (ordinarily only one's own processes are displayed). c causes only the comm field to be displayed instead of the arguments. (The comm field is the tail of the path name of the file the process last exec'ed.) This option speeds up ps somewhat and reduces the amount of output. It is also more reliable since the process can't scribble on top of it. g asks for all processes. Without this option, ps only prints ``interesting'' processes. Processes are deemed to be uninteresting if they are process group leaders, or if their arguments begin with a `-'. This normally eliminates shells and getty processes. k causes the file /usr/sys/core is used in place of /dev/kmem and /dev/mem. This is used for postmortem system debugging. l asks for a long listing. The short listing contains the user name, process ID, tty, the cumulative execution time of the process and an approximation to the command line. n asks for numeric rather than symbolic wchans. This flag implies the ``l'' flag. r asks for ``raw'' output. A non-human readable sequence of structures is output on the standard output. There is one structure for each process, the format is defined by <psout.h> tttyname restricts output to processes whose controlling tty is the specified ttyname (which should be specified as printed by ps, including t? for processes with no tty). This option must be the last one given. u A user oriented output is produced. This includes the name of the owner of the process, process id, nice value, size, tty, cpu time used, and the command. w tells ps you are on a wide terminal (132 columns). Ps normally assumes you are on an 80 column terminal. This information is used to decide how much of long commands to print. The w option may be repeated, e.g. ww, and the entire command, up to 128 characters, will be printed without regard to terminal width. x asks even about processes with no terminal. U causes ps to update a private database where is keeps system information. Thus ``ps -U'' should be included in the /etc/rc file. # A process number may be given, (indicated here by #), in which case the output is restricted to that process. This option must also be last. A second argument tells ps where to look for core if the k option is given, instead of /usr/sys/core. A third argument is the name of a swap file to use instead of the default /dev/swap. If a fourth argument is given, it is taken to be the file containing the system's namelist. Otherwise, ``/unix'' is used. The output is sorted by tty, then by process ID. The long listing is columnar and contains F Flags associated with the process. These are defined by #define lines in /usr/include/sys/proc.h. S The state of the process. 0: nonexistent; S: sleeping; W: waiting; R: running; I: intermediate; Z: terminated; T: stopped. UID The user id of the process owner. PID The process ID of the process; as in certain cults it is possible to kill a process if you know its true name. PPID The process ID of the parent process. CPU Processor utilization for scheduling. PRI The priority of the process; high numbers mean low priority. NICE Used in priority computation. ADDR The memory address of the process if resident, otherwise the disk address. SZ The size in blocks (512 bytes) of the memory image of the process. WCHAN The event for which the process is waiting or sleeping; if blank, the process is running. TTY The controlling tty for the process. TIME The cumulative execution time for the process. COMMAND The command and its arguments. A process that has exited and has a parent, but has not yet been waited for by the parent is marked <defunct>. Ps makes an educated guess as to the file name and arguments given when the process was created by examining memory or the swap area. The method is inherently some- what unreliable and in any event a process is entitled to destroy this information, so the names cannot be counted on too much. FILES
/unix system namelist /dev/kmem kernel memory /dev/swap swap device /usr/sys/core core file /dev searched to find swap device and tty names /var/run/psdatabase system namelist and device information SEE ALSO
kill(1), w(1), pstat(8) BUGS
Things can change while ps is running; the picture it gives is only a close approximation to reality. Some processes, typically those in the background, are printed with null or garbaged arguments, even though the process has not swapped. (Sometimes ps even loses on its own arguments!) In these cases, the name of the command is printed in parentheses. When automatic crash dumps are enabled, /usr/sys/core is not a sensible default core file name. 3rd Berkeley Distribution PS(1)
All times are GMT -4. The time now is 07:57 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy