identify all PIDs sharing a TCP/IP stack

EddieT · 07-26-2011, 06:14 AM

Hi,

Is there a linux command (or command combination or utility) that can identify all processes (PIDs) that are sharing a TCP/IP stack ?

MensaWater · 07-26-2011, 08:55 AM

You'd have to define what you meant by "stack".

You can use "lsof -i @<hostname>" to see all sockets associated with a specific hostname (or @<ip address> for the IP Address).

You can use "lsof -i :<port>" to see all sockets associated with a specific port (port name or number).

You can use "lsof -i @<hostname>:<port>" to see only sockets on the desired port and hostname.

EddieT · 07-28-2011, 04:07 AM

Thanks for your reply. I dont think there is any mechanism which will identify all processes sharing a TCP/IP stack, but in your response I learned somethings I never knew.

By stack - I mean an instance of a TCP/IP stack which includes transmit/receive queues, open connections and port numbers.

tredegar · 07-28-2011, 11:32 AM

Is netstat of any help to you?

MensaWater · 07-28-2011, 03:20 PM

OK the lsof -i stuff gives you the port and open connections.

lsof has many other uses as well.

netstat can give you quite a bit of information and on Linux it is much more useful for some information than on most UNIX variants but lsof is available for both Linux and most UNIX variants.