What files are open? lsof What process has a particular file open? lsof /path/to/the/file What files in some directory are open? lsof +D /path/to/the/dir What files does some user have open? lsof -u username What files do a group of users have open? lsof -u user1,user2 What files are open by process name? lsof -c procname What files are open by PID? lsof -p 123 What files are open by other PIDs? lsof -p ^123 Show network activity lsof -i What files are open by port? lsof -i :25 lsof -i :smtp List PIDs lsof -t Show network activity for a user lsof -a -u username -i Show socket use lsof -U Show NFS activity lsof -N