\documentclass[10pt,a4paper]{article}

% Packages
\usepackage{fancyhdr}           % For header and footer
\usepackage{multicol}           % Allows multicols in tables
\usepackage{tabularx}           % Intelligent column widths
\usepackage{tabulary}           % Used in header and footer
\usepackage{hhline}             % Border under tables
\usepackage{graphicx}           % For images
\usepackage{xcolor}             % For hex colours
%\usepackage[utf8x]{inputenc}    % For unicode character support
\usepackage[T1]{fontenc}        % Without this we get weird character replacements
\usepackage{colortbl}           % For coloured tables
\usepackage{setspace}           % For line height
\usepackage{lastpage}           % Needed for total page number
\usepackage{seqsplit}           % Splits long words.
%\usepackage{opensans}          % Can't make this work so far. Shame. Would be lovely.
\usepackage[normalem]{ulem}     % For underlining links
% Most of the following are not required for the majority
% of cheat sheets but are needed for some symbol support.
\usepackage{amsmath}            % Symbols
\usepackage{MnSymbol}           % Symbols
\usepackage{wasysym}            % Symbols
%\usepackage[english,german,french,spanish,italian]{babel}              % Languages

% Document Info
\author{Arest (arest)}
\pdfinfo{
  /Title (lsof.pdf)
  /Creator (Cheatography)
  /Author (Arest (arest))
  /Subject (lsof Cheat Sheet)
}

% Lengths and widths
\addtolength{\textwidth}{6cm}
\addtolength{\textheight}{-1cm}
\addtolength{\hoffset}{-3cm}
\addtolength{\voffset}{-2cm}
\setlength{\tabcolsep}{0.2cm} % Space between columns
\setlength{\headsep}{-12pt} % Reduce space between header and content
\setlength{\headheight}{85pt} % If less, LaTeX automatically increases it
\renewcommand{\footrulewidth}{0pt} % Remove footer line
\renewcommand{\headrulewidth}{0pt} % Remove header line
\renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit
% This two commands together give roughly
% the right line height in the tables
\renewcommand{\arraystretch}{1.3}
\onehalfspacing

% Commands
\newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour
\newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols
\newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns
\newcommand{\tn}{\tabularnewline} % Required as custom column type in use

% Font and Colours
\definecolor{HeadBackground}{HTML}{333333}
\definecolor{FootBackground}{HTML}{666666}
\definecolor{TextColor}{HTML}{333333}
\definecolor{DarkBackground}{HTML}{214CDB}
\definecolor{LightBackground}{HTML}{F1F3FC}
\renewcommand{\familydefault}{\sfdefault}
\color{TextColor}

% Header and Footer
\pagestyle{fancy}
\fancyhead{} % Set header to blank
\fancyfoot{} % Set footer to blank
\fancyhead[L]{
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{C}
    \SetRowColor{DarkBackground}
    \vspace{-7pt}
    {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent
        \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}}
    }
\end{tabulary}
\columnbreak
\begin{tabulary}{11cm}{L}
    \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{lsof Cheat Sheet}}}} \\
    \normalsize{by \textcolor{DarkBackground}{Arest (arest)} via \textcolor{DarkBackground}{\uline{cheatography.com/7517/cs/38710/}}}
\end{tabulary}
\end{multicols}}

\fancyfoot[L]{ \footnotesize
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{LL}
  \SetRowColor{FootBackground}
  \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}}  \\
  \vspace{-2pt}Arest (arest) \\
  \uline{cheatography.com/arest} \\
  \end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}}  \\
   \vspace{-2pt}Published 15th May, 2023.\\
   Updated 15th May, 2023.\\
   Page {\thepage} of \pageref{LastPage}.
\end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}}  \\
  \SetRowColor{white}
  \vspace{-5pt}
  %\includegraphics[width=48px,height=48px]{dave.jpeg}
  Measure your website readability!\\
  www.readability-score.com
\end{tabulary}
\end{multicols}}




\begin{document}
\raggedright
\raggedcolumns

% Set font size to small. Switch to any value
% from this page to resize cheat sheet text:
% www.emerson.emory.edu/services/latex/latex_169.html
\footnotesize % Small font.


\begin{tabularx}{17.67cm}{x{8.635 cm} x{8.635 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Basic usage}}  \tn
% Row 0
\SetRowColor{LightBackground}
List User Specific Opened Files\{\{width=40\}\} & lsof -u root \tn 
% Row Count 3 (+ 3)
% Row 1
\SetRowColor{white}
Find Processes running on Specific Port & lsof -i TCP:22 \tn 
% Row Count 5 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Exclude User with '\textasciicircum{}' Character & lsof -i -u\textasciicircum{}root \tn 
% Row Count 7 (+ 2)
% Row 3
\SetRowColor{white}
Search by PID & lsof -p 1 \tn 
% Row Count 8 (+ 1)
% Row 4
\SetRowColor{LightBackground}
List all files opened by a particular command & lsof -c dhcpd \tn 
% Row Count 11 (+ 3)
% Row 5
\SetRowColor{white}
List open files that have no links to them on the filesystem & lsof +L1 \tn 
% Row Count 14 (+ 3)
% Row 6
\SetRowColor{LightBackground}
Kill all Activity of Particular User & kill -9 \textbackslash{}`lsof -t -u doe\textbackslash{}` \tn 
% Row Count 16 (+ 2)
% Row 7
\SetRowColor{white}
Eavesdrop on your system & diff \textless{}(lsof -p 1234) \textless{}(sleep 10; lsof -p 1234) \tn 
% Row Count 19 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{9.6712 cm} x{7.5988 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Filesystem related commands}}  \tn
% Row 0
\SetRowColor{LightBackground}
List files opened by a PID\{\{width=40\}\} & lsof -p 15857 \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Show which process is blocking umount (Device or resource is busy) & lsof /folder \tn 
% Row Count 5 (+ 3)
% Row 2
\SetRowColor{LightBackground}
Find Out who's Looking What Files and Commands? & lsof -i -u doe \tn 
% Row Count 8 (+ 3)
% Row 3
\SetRowColor{white}
Discovering all open files/dirs underneath a directory & lsof +D \textless{}dirname\textgreater{} \tn 
% Row Count 11 (+ 3)
% Row 4
\SetRowColor{LightBackground}
View user activity per directory. & sudo lsof -u someuser -a +D /etc \tn 
% Row Count 13 (+ 2)
% Row 5
\SetRowColor{white}
Debug how files are being accessed by a process & inotifywait -m -r . \tn 
% Row Count 16 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{8.635 cm} x{8.635 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Network related commands}}  \tn
% Row 0
\SetRowColor{LightBackground}
List all Network Connections\{\{width=40\}\} & lsof -i \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
Which process has a port open & lsof -i :80 \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
Find the process that is using a certain port e.g. port 3000 & lsof -P | grep ':3000' \tn 
% Row Count 7 (+ 3)
% Row 3
\SetRowColor{white}
List Only IPv4/IPv6 Open Files & lsof -i 4\{\{nl\}\}lsof -6 \tn 
% Row Count 9 (+ 2)
% Row 4
\SetRowColor{LightBackground}
List Open Files of TCP Port ranges 1-1024 & lsof -i TCP:1-1024 \tn 
% Row Count 12 (+ 3)
% Row 5
\SetRowColor{white}
Which program is this port belongs to ? & lsof -i tcp:80\{\{nl\}\}lsof -i \seqsplit{:80https://cheatography}.com/\# \tn 
% Row Count 15 (+ 3)
% Row 6
\SetRowColor{LightBackground}
List all open ports and their owning executables & lsof -i -P | grep -i "listen" \tn 
% Row Count 18 (+ 3)
% Row 7
\SetRowColor{white}
Check open ports (IPv4) & lsof -Pni4 | grep LISTEN \tn 
% Row Count 20 (+ 2)
% Row 8
\SetRowColor{LightBackground}
Show apps that use internet connection at the moment. (Multi-Language) & lsof -P -i -n \tn 
% Row Count 24 (+ 4)
% Row 9
\SetRowColor{white}
Lists all listening ports together with the PID of the associated process & lsof -Pan -i tcp -i udp \tn 
% Row Count 28 (+ 4)
% Row 10
\SetRowColor{LightBackground}
View network activity of any application or user in realtime & lsof -r 2 -p PID -i -a \tn 
% Row Count 31 (+ 3)
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{8.635 cm} x{8.635 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Network related commands (cont)}}  \tn
% Row 11
\SetRowColor{LightBackground}
Show apps that use internet connection at the moment. & lsof -P -i -n | cut -f 1 -d " "| uniq | tail -n +2 \tn 
% Row Count 3 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{X}
\SetRowColor{DarkBackground}
\mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Other commands}}  \tn
\SetRowColor{white}
\mymulticolumn{1}{x{17.67cm}}{{\emph{\#Keep a copy of the raw Youtube FLV,MP4,etc stored in /tmp/}} \newline % Row Count 2 (+ 2)
lsof -n -P|grep FlashXX|awk '\{ print "/proc/" \$2 "/fd/" substr(\$4, 1, length(\$4)-1) \}'|while read f;do newname=\$(exiftool -FileModifyDate -FileType -t -d \%Y\%m\%d\%H\%M\%S \$f|cut -f2|tr 'n' '.'|sed 's/.\$//');echo "\$f -\textgreater{} \$newname";cp \$f \textasciitilde{}/Vids/\$newname;done \newline % Row Count 8 (+ 6)
{\emph{\#Check which files are opened by Firefox then sort by largest size.}} \newline % Row Count 10 (+ 2)
lsof -p \$(pidof firefox) | awk '/.mozilla/ \{ s = int(\$7/(2\textasciicircum{}20)); if(s\textgreater{}0) print (s)" MB -{}- "\$9 | "sort -rn" \}' \newline % Row Count 13 (+ 3)
{\emph{\#Check how far along (in \%) your program is in a file}} \newline % Row Count 15 (+ 2)
F=bigdata.xz; lsof -o0 -o -Fo \$F | awk -Ft -v s=\$(stat -c \%s \$F) '/\textasciicircum{}o/\{printf("\%d\%\%n", 100*\$2/s)\}' \newline % Row Count 17 (+ 2)
{\emph{\#Display any tcp connections to apache}} \newline % Row Count 18 (+ 1)
for i in \textbackslash{}`ps aux | grep httpd | awk '\{print \$2\}'\textbackslash{}`; do lsof -n -p \$i | grep ESTABLISHED; done;% Row Count 20 (+ 2)
} \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}-}
\end{tabularx}
\par\addvspace{1.3em}



\end{document}