2 .\" Copyright (c) 2007-2008 Robert N. M. Watson
3 .\" All rights reserved.
5 .\" Redistribution and use in source and binary forms, with or without
6 .\" modification, are permitted provided that the following conditions
8 .\" 1. Redistributions of source code must retain the above copyright
9 .\" notice, this list of conditions and the following disclaimer.
10 .\" 2. Redistributions in binary form must reproduce the above copyright
11 .\" notice, this list of conditions and the following disclaimer in the
12 .\" documentation and/or other materials provided with the distribution.
14 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 .Nd get detailed process information
39 .Op Fl b | c | f | i | j | k | s | t | v
44 utility displays detailed information about the processes identified by the
48 flag is used, all processes.
50 By default, basic process statistics are printed; one of the following
51 options may be specified in order to select more detailed process information
53 .Bl -tag -width indent
55 Display binary information for the process.
57 Display command line arguments for the process.
59 Display file descriptor information for the process.
61 Display signal pending and disposition information for the process.
63 Display signal pending and blocked information for the process threads.
65 Display the stacks of kernel threads in the process, excluding stacks of
66 threads currently running on a CPU and threads with stacks swapped to disk.
67 If the flag is repeated, function offsets as well as function names are
70 Display security credential information for the process.
72 Display thread information for the process.
74 Display virtual memory mappings for the process.
77 All options generate output in the format of a table, the first field of
78 which is the process ID to which the row of information corresponds.
81 flag may be used to suppress table headers.
85 flag may be used to specify a wait interval at which to repeat the printing
86 of the requested process information.
89 flag is not specified, the output will not repeat.
91 Some information, such as VM and file descriptor information, is available
92 only to the owner of a process or the superuser.
93 .Ss Binary Information
94 Display the process ID, command, and path to the process binary:
96 .Bl -tag -width indent -compact
102 osreldate for process binary
104 path to process binary (if available)
106 .Ss Command Line Arguments
107 Display the process ID, command, and command line arguments:
109 .Bl -tag -width indent -compact
115 command line arguments (if available)
118 Display detailed information about each file descriptor referenced by a
119 process, including the process ID, command, file descriptor number, and
120 per-file descriptor object information, such as object type and file system
123 .Bl -tag -width indent -compact
129 file descriptor number or cwd/root/jail
135 file descriptor flags
137 file descriptor reference count
139 file descriptor offset
143 file path or socket addresses (if available)
146 The following file descriptor types may be displayed:
148 .Bl -tag -width X -compact
164 pseudo-terminal master
169 The following vnode types may be displayed:
171 .Bl -tag -width X -compact
188 The following file descriptor flags may be displayed:
190 .Bl -tag -width X -compact
208 .Ss Signal Disposition Information
209 Display signal pending and disposition for a process:
211 .Bl -tag -width ident -compact
219 process signal disposition details, three symbols
220 .Bl -tag -width X -compact
222 if signal is pending in the global process queue, - otherwise
224 if signal delivery disposition is SIGIGN, - otherwise
226 if signal delivery is to catch it, - otherwise
232 switch is given, the signal numbers are shown instead of signal names.
233 .Ss Thread Signal Information
234 Display signal pending and blocked for a process threads:
236 .Bl -tag -width ident -compact
246 thread signal delivery status, two symbols
247 .Bl -tag -width X -compact
249 if signal is pending for the thread, - otherwise
251 if signal is blocked in the thread signal mask, - if not blocked
257 switch has the same effect as for the
259 switch, the signals numbers are shown instead of signal names.
260 .Ss Kernel Thread Stacks
261 Display kernel thread stacks for a process, allowing further interpretation
262 of thread wait channels.
265 flag is repeated, function offsets, not just function names, are printed.
267 This feature requires
271 to be compiled into the kernel.
273 .Bl -tag -width indent -compact
283 kernel thread call stack
285 .Ss Security Credentials
286 Display process credential information:
288 .Bl -tag -width indent -compact
308 .Ss Thread Information
309 Display per-thread information, including process ID, per-thread ID, name,
310 CPU, and execution state:
312 .Bl -tag -width indent -compact
322 current or most recent CPU run on
330 .Ss Virtual Memory Mappings
331 Display process virtual memory mappings, including addresses, mapping
332 meta-data, and mapped object information:
334 .Bl -tag -width indent -compact
338 starting address of mapping
340 ending address of mapping
346 private resident pages
357 The following protection flags may be displayed:
359 .Bl -tag -width X -compact
368 The following VM object types may be displayed:
370 .Bl -tag -width XX -compact
387 The following mapping flags may be displayed:
389 .Bl -tag -width X -compact
404 .An Robert N M Watson
406 Some field values may include spaces, which limits the extent to which the
409 may be mechanically parsed.
411 The display of open file or memory mapping pathnames is implemented using the
413 If a file system does not use the name cache, or the path to a file is not in
414 the cache, a path will not be displayed.
417 currently supports extracting data only from a live kernel, and not from