Proc and Processes

Tip of the Trade: The /proc directory provides a text-based way of interfacing with system settings and processes. Sure, it looks complicated at first glance, but it is incredibly helpful when troubleshooting.


You Can't Detect What You Can't See: Illuminating the Entire Kill Chain

On-Demand Webinar

Posted November 12, 2008

Juliet Kemp

Juliet Kemp

The /proc directory — which provides a text-based way of interfacing with system settings and processes — looks complicated at first glance, but it can be incredibly helpful when troubleshooting. Try out these tips for looking at processes:

ls /proc will show you a long list of directories. These are your processes, one directory per process ID. Have a look at your process list (using ps -A), and pick a process. The one I'll look at is

1787 ?        00:00:00 thunderbird
so directory /proc/1787.

Look at the contents of that directory. The file cmdline tells you what command was used to launch this process. This can be useful if the problem you have is launch-related. You'll be warned that this might be binary, but it's mostly text and easy to read. environ, similarly, gives you the command environment, which is also useful for troubleshooting (try starting the process on another machine and comparing the files); and the fd directory allows you to check what the process is accessing.

maps shows the memory maps to executables and library files. For each executable or library, the memory address is given, together with the permissions (r/w/x, s(hared), and p(rivate - copy on write)), the offset into the file, and the device and device inode. For my Thunderbird process, it starts like this:

08048000-080e9000 r-xp 00000000 03:01 2354694    /bin/bash
080e9000-080ef000 rw-p 000a0000 03:01 2354694    /bin/bash
080ef000-08183000 rw-p 080ef000 00:00 0          [heap]
Lastly, for this brief overview: stat and status (the more human-readable file) both give status information. This is the full list that ps pulls selected information from.

For further information, the proc manpage is incredibly comprehensive and well worth a look.

This article was first published on ServerWatch.com.

Tags: Device, IT, XP, Memory, Thunderbird

0 Comments (click to add your comment)
Comment and Contribute


(Maximum characters: 1200). You have characters left.



IT Management Daily
Don't miss an article. Subscribe to our newsletter below.

By submitting your information, you agree that datamation.com may send you Datamation offers via email, phone and text message, as well as email offers about other products and services that Datamation believes may be of interest to you. Datamation will process your information in accordance with the Quinstreet Privacy Policy.