From owner-freebsd-questions Fri Jul 12 11:59:44 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AED0737B4C8 for ; Fri, 12 Jul 2002 11:59:37 -0700 (PDT) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 01E8043E65 for ; Fri, 12 Jul 2002 11:59:37 -0700 (PDT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.12.5/8.12.5) id g6CIxaYi017611; Fri, 12 Jul 2002 13:59:36 -0500 (CDT) (envelope-from dan) Date: Fri, 12 Jul 2002 13:59:36 -0500 From: Dan Nelson To: Vlad Skvortsov Cc: questions@FreeBSD.ORG Subject: Re: how to find process that create()ed and unlink()ed file ? Message-ID: <20020712185935.GD12632@dan.emsphone.com> References: <20020712174952.G64434@smarts-gsm.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020712174952.G64434@smarts-gsm.ru> X-OS: FreeBSD 5.0-CURRENT X-message-flag: Outlook Error User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In the last episode (Jul 12), Vlad Skvortsov said: > Is there a way to find out a process that has opened and then > unlinked a file without closing it ? How to find inodes unreferenced > by directory entries ? I know the answer to question #1, at least. Install lsof from the ports tree, and run "lsof +L1". -- Dan Nelson dnelson@allantgroup.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message