LSFD(1) LSFD(1) (NAME) lsfd - (SYNOPSIS) lsfd [] (DESCRIPTION) lsfd lsof(8) . lsof lsfd (namespaces) . lsfd (drop-in) lsof . . . --output columns-list . lsfd Libsmartcols . --output --filter . lsfd --list-columns . (OPTIONS) -l, --threads (threads). -J, --json JSON. -n, --noheadings (headings). -o, --output list . (OUTPUT COLUMNS) . list +list ( lsfd -o +DELETED). -r, --raw (raw). --notruncate . -p, --pid list . list (PID) . (FILTER EXAMPLES) . -i[4|6], --inet[=4|=6] IPv4 / IPv6. -Q, --filter expression expression . scols-filter(5) (FILTER EXAMPLES) . -Q PID ( : -Q PID==1) -p ( : -p 1) -p -Q . -C, --counter label:filter_expr --summary. lsfd label . lsfd filter_expr label . lsfd --filter . filter_expr scols-filter(5) . label { : . . (COUNTER EXAMPLES) . --summary[=mode] . mode only append never . mode only . . . --counter . lsfd ( ) . : --summary --json . --summary=only --json . --debug-filter . lsfd . --dump-counters --summary. --hyperlink[=when] (hyperlinks). when always never auto . auto . -H, --list-columns --output . --json --raw . -h, --help . -V, --version . (ENVIRONMENT) LIBSMARTCOLS_DEBUG=all libsmartcols . LIBSMARTCOLS_DEBUG_PADDING=on (visible padding). LIBSMARTCOLS_JSON=compact|lines JSON --json . compact JSON lines JSON Lines ( JSON ). JSON (pretty-printed) . (OUTPUT COLUMNS) . < > . : . . AINODECLASS (anonymous inode). ASSOC . BLKDRV (driver) /proc/devices . BPF-MAP.ID (ID) bpf. BPF-MAP.TYPE bpf. BPF-MAP.TYPE.RAW bpf (). BPF.NAME bpf. BPF-PROG.ID (ID) bpf. BPF-PROG.TAG (TAG) bpf. BPF-PROG.TYPE bpf. BPF-PROG.TYPE.RAW bpf (). CHRDRV (driver) /proc/devices . COMMAND . DELETED . DEV (ID) . DEVTYPE (blk char nodev). ENDPOINTS (endpoints) (IPC) (fd). lsfd -p lsfd . (fd) : FIFO mqueue ptmx pts PID,COMMAND,ASSOC[-r][-w] ([-r][-w]) / . eventfd PID,COMMAND,ASSOC UNIX UNIX-STREAM. lsfd ENDPOINTS . lsfd sock_diag(7) UNIX . SELinux sock_diag . virt_sandbox_use_netlink . container_selinux(8) . UNIX-STREAM PID,COMMAND,ASSOC[-r?][-w?] ([-r?][-w?]) SOCK.SHUTDOWN . EVENTFD.ID Eventfd. EVENTPOLL.TFDS eventpoll. FD (File descriptor) . FLAGS . FUID (UID) . INET.LADDR IP . INET.RADDR IP (remote). INET6.LADDR IPv6 . INET6.RADDR IPv6 . INODE (Inode). INOTIFY.INODES INOTIFY.INODES.RAW. inode-number,source-of-inode . INOTIFY.INODES.RAW . inode-number,device-major:device-minor . KNAME /proc/pid/fd/fd /proc/pid/map_files/region. KTHREAD (kernel thread) . MAJ:MIN . MAPLEN ( / page). MISCDEV /proc/misc. MNTID (Mount ID). MODE (rwx). NAME KNAME. KNAME . : AF_VSOCK state=SOCK.STATE type=SOCK.TYPE laddr=VSOCK.LADDR[ raddr=VSOCK.RADDR] raddr (listening) . bpf-map id=BPF-MAP.ID type=BPF-MAP.TYPE[ name=BPF.NAME] bpf-prog id=BPF-PROG.ID type=BPF-PROG.TYPE tag= BPF-PROG.TAG [ name=BPF.NAME] eventpoll tfds=EVENTPOLL.TFDS eventfd id=EVENTFD.ID inotify inodes=INOTIFY.INODES misc:tun iface=TUN.IFACE[ devnetns=TUN.DEVNETNS][ socknetns=SOCK.NETNS] NETLINK protocol=NETLINK.PROTOCOL[ lport=NETLINK.LPORT[ group=NETLINK.GROUPS]] PACKET type=SOCK.TYPE[ protocol=PACKET.PROTOCOL][ iface=PACKET.IFACE] pidfd pid=TARGET-PID comm=TARGET-COMMAND nspid=TARGET-NSPIDS lsfd TARGET-PID TARGET-NSPIDS /proc/pid/fdinfo/fd . PING state=SOCK.STATE[ id=PING.ID][ laddr=INET.LADDR [ raddr=INET.RADDR]] PINGv6 state=SOCK.STATE[ id=PING.ID][ laddr=INET6.LADDR [ raddr=INET6.RADDR]] ptmx tty-index=PTMX.TTY-INDEX lsfd PTMX.TTY-INDEX /proc/pid/fdinfo/fd . RAW state=SOCK.STATE[ protocol=RAW.PROTOCOL [ laddr=INET.LADDR [ raddr=INET.RADDR]]] RAWv6 state=SOCK.STATE[ protocol=RAW.PROTOCOL [ laddr=INET6.LADDR [ raddr=INET6.RADDR]]] signalfd mask=SIGNALFD.MASK TCP, TCPv6 state=SOCK.STATE[ laddr=TCP.LADDR [ raddr=TCP.RADDR]] timerfd clockid=TIMERFD.CLOCKID[ remaining=TIMERFD.REMAINING [ interval=TIMERFD.INTERVAL]] UDP, UDPv6 state=SOCK.STATE[ laddr=UDP.LADDR [ raddr=UDP.RADDR]] UDP.RADDR 0.0.0.0 UDP.RPORT 0 lsfd raddr= . UDP-LITE, UDPLITEv6 state=SOCK.STATE[ laddr=UDPLITE.LADDR [ raddr=UDPLITE.RADDR]] UNIX-STREAM state=SOCK.STATE[ path=UNIX.PATH] UNIX state=SOCK.STATE[ path=UNIX.PATH] type=SOCK.TYPE (deleted) . KNAME DELETED XMODE . NETLINK.GROUPS (multicast) (Netlink). NETLINK.LPORT () . NETLINK.PROTOCOL . NLINK (Link count). NS.NAME (NS.TYPE:[INODE]) . NS.TYPE . mnt cgroup uts ipc user pid net time unknown . OWNER . PACKET.IFACE (packet socket). PACKET.PROTOCOL (L2) (). PACKET.PROTOCOL.RAW (L2) (). PARTITION /proc/partition. PID (PID) . PIDFD.COMM pidfd. PIDFD.NSPID NSpid /proc/pid/fdinfo/fd pidfd. kernel/fork.c : pid pid pidfd pid pid Pid NSpid . Pid NSpid /proc//status Pid NSpid pid procfs . PIDFD.PID (PID) pidfd. PING.ID <`number`> ICMP PING. POS (File position). RAW.PROTOCOL (raw socket) (). v2.39 v2.41 . RAW.PROTOCOL.RAW (). RDEV ( ). SIGNALFD.MASK . SIZE . SOCK.LISTENING (Listening socket). SOCK.NETS . SOCK.PROTONAME . SOCK.SHUTDOWN (shutdown) . [-r?] r . - . ? . [-w?] w . - . ? . SOCK.STATE . SOCK.TYPE . socket : o stream o dgram o raw o rdm o seqpacket o dccp o packet SOURCE . ERROR TYPE lsfd syscall:_errno_ . STTYPE stat(2): BLK CHR DIR FIFO LINK REG SOCK UNKN. TCP.LADDR (INET.LADDR INET6.LADDR) () TCP . TCP.LPORT () TCP . TCP.RADDR (INET.RADDR INET6.RADDR) () TCP . TCP.RPORT () TCP . TID (Thread ID) . TIMERFD.CLOCKID (Clockid). TIMERFD.INTERVAL (Interval). TIMERFD.REMAINING . PTMX.TTY-INDEX TTY . TUN.DEVNETNS . TUN.IFACE tun. TYPE STTYPE. STTYPE . SOCK SOCK.PROTONAME . UNKN SOURCE anon_inodefs AINODECLASS . lsfd ERROR . UDP.LADDR IP () UDP . UDP.LPORT () UDP . UDP.RADDR IP () UDP . UDP.RPORT () UDP . UDPLITE.LADDR IP () UDPLite . UDPLITE.LPORT () UDP . UDPLITE.RADDR IP () UDPLite . UDPLITE.RPORT () UDP . UID (UID). UNIX.IPEER < number > UNIX. lsfd UNIX.IPEER . UNIX ENDPOINTS . UNIX.PATH UNIX. USER . VSOCK.LADDR , VSOCK.RADDR VSOCK . VSOCK.LCID:VSOCK.LPORT . (CID) : "*" "hypervisor" "local" "host". : "*". VSOCK.LCID , VSOCK.RCID (context identifiers) VSOCK. VSOCK.LPORT , VSOCK.RPORT VSOCK. XMODE MODE. lsfd / XMODE . [-r] . MODE . [-w] . MODE . [-x] . MODE . [-D] . DELETED . [-Ll] (leased). l . L . / / L . [-m] (). eventpoll (select(2) pselect(2) poll(2) ppoll(2)) . lsfd m . restart_syscall(2) . (FILTER EXAMPLES) lsfd . -Q ( --filter) . -o ( --output) . PID 1 PID 2: # lsfd -Q '(PID == 1) or (PID == 2)' : # lsfd -Q '(PID == 1) || (PID == 2)' : # lsfd --pid 1,2 : # lsfd --pid '1 2' pidof(1) "firefox": # lsfd --pid "$(pidof firefox)" PID 1: # lsfd -Q '(PID == 1) and (FD == 1)' : # lsfd -Q '(PID == 1) && (FD == 1)' : # lsfd -Q 'ASSOC == "exe"' : # lsfd -Q 'ASSOC eq "exe"' : # lsfd -o NAME -Q 'ASSOC eq "exe"' | sort -u : # lsfd -Q 'DELETED' (): # lsfd -Q 'TYPE != "REG"' : # lsfd -Q 'DEVTYPE == "blk"' TYPE: # lsfd -Q 'TYPE == "BLK"' "dconf" : # lsfd -Q 'NAME =~ ".\*/dconf/.*"' QEMU: # lsfd -Q '(COMMAND =~ ".\*qemu.*") and (FD >= 0)' timerfd : # lsfd -Q '(TIMERFD.remaining < 0.5) and (TIMERFD.remaining > 0.0)' : # lsfd -Q 'TYPE == "UNIX-STREAM" && UNIX.PATH =~ ".+"' -oUNIX.PATH,PID,COMMAND,FD,SOCK.STATE,ENDPOINTS : # lsfd -Q 'TYPE == "UNIX-STREAM" && UNIX.PATH == "@/tmp/.X11-unix/X0"' -oUNIX.PATH,PID,COMMAND,FD,SOCK.STATE,ENDPOINTS (COUNTER EXAMPLES) netlink unix: # lsfd --summary=only \ -C 'netlink sockets':'(NAME =~ "NETLINK:.*")' \ -C 'unix sockets':'(NAME =~ "UNIX:.*")' VALUE COUNTER 57 netlink sockets 1552 unix sockets JSON: # lsfd --summary=only --json \ -C 'netlink sockets':'(NAME =~ "NETLINK:.*")' \ -C 'unix sockets':'(NAME =~ "UNIX:.*")' { "lsfd-summary": [ { "value": 15, "counter": "netlink sockets" },{ "value": 798, "counter": "unix sockets" } ] } (HISTORY) lsfd v2.38 util-linux . (AUTHORS) Masatake YAMATO , Karel Zak (SEE ALSO) bpftool(8), bps(8), lslocks(8), lsof(8), pidof(1), proc(5), scols-filter(5), socket(2), ss(8), stat(2), vsock(7) (REPORTING BUGS) . (AVAILABILITY) lsfd util-linux . . util-linux 2.42.3 2026-09-02 LSFD(1)