CODEWITHSUNDEEP
unixmemoryprocesslinux-kernel
alasarr
alasarr

Reputation: 1605

lsof FD column equal to DEL, what does it mean?

I've a process which is using too much memory.

When I run lsof -p <pid> the output is :

ETL-GRIB 5981 root  DEL    REG    8,4          183633075 /tmp/icom/65516_GRIB/20150921220023_6796_YTXG23EGRR211800__ln_3857.shp
ETL-GRIB 5981 root  DEL    REG    8,4          183633059 /tmp/icom/65516_GRIB/20150921220023_6796_YTXG23EGRR211800__pl_3857.shp
...

What DEL mean? It could be that the process has the file in memory but It has been deleted by any other process?

Upvotes: 9

Views: 8918

Answers (2)

Appu Sidhardh
Appu Sidhardh

Reputation: 146

lsof usually reports entries from the Linux /proc/<PID>/maps file with mem in the TYPE column. However, when lsof can't stat(2) a path in the process maps file and the mapsfile entry contains (deleted), indicating the file was deleted after it had been opened, lsof reports the file type as DEL.

Yes, Simply those files are deleted after they are read by the process. If you have updated/replaced those files then you probably want to restart the service/process.

Upvotes: 13

Armali
Armali

Reputation: 19395

It could be that the process has the file in memory but It has been deleted by any other process?

Yes, or by the same process.

Upvotes: 1

Related Questions