NAME
piddler - Display all process table, open files, and network connections for a PID.
SYNOPSIS
piddler [-a] [-d] [-f] [-m] [-n] [-p] [-r] [-r] [-t] [-u]
FLAGS
-a
Show a_inodes.
-d
Do not dedup.
-f
Show FIFOs.
-m
Show memory mapped libraries of the REG type.
-n
Do not resolve PTR addresses
--nc
Disable color..
-p
Show pipes.
-r
Show show VREG / files.
-t
Show shared libraries.
-u
Show unix sockets.
ENVIROMENTAL VARIABLES
These are used for XORing the corresponding flags.
NO_COLOR
If set to 1, color will be disabled.
PIDDLER_a_inode
If set to 1, a_inode types will be shown.
PIDDLER_fifo
If set to 1, FIFOs will not be shown.
PIDDLER_memreglib
If set to 1, memory mapped libraries with the type REG will be shown.
PIDDLER_txt
If set to 1, libraries with the TXT type will not be shown.
PIDDLER_pipe
If set to 1, pipes will not be shown.
PIDDLER_unix
If set to 1, unix socket will not be shown.
PIDDLER_vregroot
If set to 1, VREG / will not be shown.
PIDDLER_dont_dedup
If set to 1, duplicate file handles are removed.
PIDDLER_dont_resolv
If set to 1, PTR addresses will not be resolved for network connections.
FILE HANDLE DEDUPING
By default it checks if file handles are open in the same mode more than once. If it finds one of these + is appended to the value in the FD column.
The following are also RW filehandles.
u
uw
ur