晕，lsof失效了，咋回事？

yuio654

bash-2.05b# netstat -a|grep 8009
      *.18009              *.*                0      0 49152      0 LISTEN
      *.8009               *.*                0      0 49152      0 LISTEN
bash-2.05b#
bash-2.05b# lsof -i TCP:8009
bash-2.05b#
bash-2.05b# lsof -i |grep 8009
bash-2.05b# lsof -i -n|grep 8009


咋回事呢？

只能通过pfile去找端口被哪个进程占用着了

yuio654

原来如此


There were two explanations why “lsof” did not show, what was expected:

1) One thing that might prevent lsof to print all, is if the ports are controlled by inetd
or some such (i.e. there is nothing actively listening on them until you try talking to them).

Also, try telneting to the port and then run lsof while the telnet session is connected.

2) On Solaris 10, using “lsof -i” to show mapping of processes to TCP ports incorrectly shows all
processes that have socket open as using port 65535, for example:

sshd 8005 root 8u IPv4 0×60007ebdac0 0t0 TCP *:65535
(LISTEN)
sendmail 1116 root 5u IPv4 0×60007ecce00 0t0 TCP *:65535
(LISTEN)

This is a known bug in lsof that can _not_ be fixed because of differences between Solaris 10
and previous versions. So the useful “lsof -i :<port>” is now not useful.

Guptill

pfiles命令也可以达到同样的效果。

solaris 8已经有了。虽然没有lsof方便。

guopy007

pfiles也可以查看进程打开的文件的的

yuio654

原帖由 guopy007 于 2009-9-28 10:55 发表
pfiles也可以查看进程打开的文件的的

稍微有点麻烦

easybegin

原帖由 yuio654 于 2009-9-27 11:18 发表
原来如此


There were two explanations why “lsof” did not show, what was expected:

1) One thing that might prevent lsof to print all, is if the ports are controlled by inetd
or some such ...

这个收藏了