lsof: list of open files


strace article, very detailed

So let’s first check what chain does: startstrace, track forked childs (-f) for the open system call (-e open). Ascommand we track the ls utility and redirect any errors to the screen output. For other interesting system calls, see the man 2 syscalls page.

If you want a clean output which only shows , here is a trick to only list the files:

list file operations of a program:      strace -f -e open ls 2>&1



sudo strace -f -o foo.trace su user -c 'mycommand


system calls of a program, ex. ls:                  strace ls

iotop   input-output stats

netstat -antp     show open ports

iftop  – data through socket connections

iptraf – net monitoring

nethogs – speed meeter, network

lttng – really deep trace tool


get listening tcp ports on my machine:

netstat -anpt

Save running machine

# rsync -aAXv --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/media/*","/lost+found", "/home/*/.gvfs"} / /path/to/backup/folder