Zane C. Bowers-Hadley

NAME

piddler - Display all process table, open files, and network connections for a PID.

SYNOPSIS

piddler [-a] [-d] [-f] [-m] [-n] [-p] [-r] [-r] [-t] [-u]

FLAGS

-a

Show a_inodes.

-d

Do not dedup.

-f

Show FIFOs.

-m

Show memory mapped libraries of the REG type.

-n

Do not resolve PTR addresses

--nc

Disable color..

-p

Show pipes.

-r

Show show VREG / files.

-t

Show shared libraries.

-u

Show unix sockets.

ENVIROMENTAL VARIABLES

These are used for XORing the corresponding flags.

NO_COLOR

If set to 1, color will be disabled.

PIDDLER_a_inode

If set to 1, a_inode types will be shown.

PIDDLER_fifo

If set to 1, FIFOs will not be shown.

PIDDLER_memreglib

If set to 1, memory mapped libraries with the type REG will be shown.

PIDDLER_txt

If set to 1, libraries with the TXT type will not be shown.

PIDDLER_pipe

If set to 1, pipes will not be shown.

PIDDLER_unix

If set to 1, unix socket will not be shown.

PIDDLER_vregroot

If set to 1, VREG / will not be shown.

PIDDLER_dont_dedup

If set to 1, duplicate file handles are removed.

PIDDLER_dont_resolv

If set to 1, PTR addresses will not be resolved for network connections.

FILE HANDLE DEDUPING

By default it checks if file handles are open in the same mode more than once. If it finds one of these + is appended to the value in the FD column.

The following are also RW filehandles.

   u
   uw
   ur