<br><br><div class="gmail_quote">On Fri, Mar 14, 2008 at 1:03 PM, Julian Field <<a href="mailto:MailScanner@ecs.soton.ac.uk">MailScanner@ecs.soton.ac.uk</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
He wanted an lsof from the "extracting attachments" processes, not just<br>
a ps listing.<br>
<div class="Ih2E3d"><br>
D</div></blockquote></div><br>Sorry, here lsof output of a MailScanner process that is 'Extracting attachments'<br><br>[root@mars ~]# lsof +r -p 24194<br>COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME<br>
MailScann 24194 root cwd DIR 3,2 73728 36880 /var/spool/mqueue.in<br>MailScann 24194 root rtd DIR 3,2 4096 2 /<br>MailScann 24194 root txt REG 3,2 15076 118827 /usr/bin/perl<br>
MailScann 24194 root mem REG 3,2 20868 555706 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Socket/Socket.so<br>MailScann 24194 root mem REG 3,2 37060 555489 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so<br>
MailScann 24194 root mem REG 3,2 14156 555455 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Digest/MD5/MD5.so<br>MailScann 24194 root mem REG 3,2 35120 555469 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so<br>
MailScann 24194 root mem REG 3,2 42556 1076537 /lib/libnss_files-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 80176 555708 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Storable/Storable.so<br>
MailScann 24194 root mem REG 3,2 264091 392545 /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi/auto/DBD/mysql/mysql.so<br>MailScann 24194 root mem REG 3,2 230676 228589 /usr/lib/mysql/libmysqlclient.so.10.0.0<br>
MailScann 24194 root mem REG 3,2 95716 282657 /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/Digest/SHA1/SHA1.so<br>MailScann 24194 root mem REG 3,2 117316 555500 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/POSIX/POSIX.so<br>
MailScann 24194 root mem REG 3,2 32044 555451 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Data/Dumper/Dumper.so<br>MailScann 24194 root mem REG 3,2 96260 701167 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/version/vxs/vxs.so<br>
MailScann 24194 root mem REG 3,2 77074 701423 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/Util.so<br>MailScann 24194 root mem REG 3,2 84240 724610 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Mail/ClamAV/ClamAV.so<br>
MailScann 24194 root mem REG 3,2 6432 555740 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Sys/Hostname/Hostname.so<br>MailScann 24194 root mem REG 3,2 560348 749312 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/DBD/SQLite/SQLite.so<br>
MailScann 24194 root mem REG 3,2 15176 1075061 /lib/libutil-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 7272 668359 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Filesys/Statvfs/Statvfs.so<br>
MailScann 24194 root mem REG 3,2 1011020 1076551 /lib/libdb-<a href="http://4.3.so">4.3.so</a><br>MailScann 24194 root mem REG 3,2 19596 555750 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so<br>
MailScann 24194 root mem REG 3,2 288170 667932 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so<br>MailScann 24194 root mem REG 3,2 16580 554664 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/IO/IO.so<br>
MailScann 24194 root mem REG 3,2 120789 668625 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Parser.so<br>MailScann 24194 root mem REG 3,2 9348 555447 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Cwd/Cwd.so<br>
MailScann 24194 root mem REG 3,2 21768 1075233 /lib/libnss_dns-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 67784 118313 /usr/lib/libbz2.so.1.0.3<br>MailScann 24194 root mem REG 3,2 123316 701689 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/DBI/DBI.so<br>
MailScann 24194 root mem REG 3,2 1369338 115391 /usr/local/lib/libclamav.so.3.0.4<br>MailScann 24194 root mem REG 3,2 11312 342056 /usr/lib/MailScanner/utils/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so<br>
MailScann 24194 root mem REG 3,2 24254 115303 /usr/local/lib/libclamunrar_iface.so.3.0.4<br>MailScann 24194 root mem REG 3,2 12176 555476 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Fcntl/Fcntl.so<br>
MailScann 24194 root mem REG 3,2 44005 702302 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Net/DNS/DNS.so<br>MailScann 24194 root mem REG 3,2 842637 151810 /usr/lib/sse2/libgmp.so.3.3.3<br>
MailScann 24194 root mem REG 3,2 58491 668343 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so<br>MailScann 24194 root mem REG 3,2 74886 392831 /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi/auto/Socket6/Socket6.so<br>
MailScann 24194 root mem REG 3,2 113224 1076548 /lib/ld-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 1479644 1076549 /lib/libc-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 203836 1076553 /lib/libm-<a href="http://2.4.so">2.4.so</a><br>
MailScann 24194 root mem REG 3,2 16400 1076552 /lib/libdl-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 75632 130256 /usr/lib/libz.so.1.2.3<br>MailScann 24194 root mem REG 3,2 107716 1076550 /lib/libpthread-<a href="http://2.4.so">2.4.so</a><br>
MailScann 24194 root mem REG 3,2 88632 1075086 /lib/libnsl-<a href="http://2.4.so">2.4.so</a><br>MailScann 24194 root mem REG 3,2 72244 1076556 /lib/libresolv-<a href="http://2.4.so">2.4.so</a><br>
MailScann 24194 root mem REG 3,2 1242740 554523 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so<br>MailScann 24194 root mem REG 3,2 18940 555477 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/File/Glob/Glob.so<br>
MailScann 24194 root mem REG 3,2 18256 554513 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Sys/Syslog/Syslog.so<br>MailScann 24194 root mem REG 3,2 27716 1076557 /lib/libcrypt-<a href="http://2.4.so">2.4.so</a><br>
MailScann 24194 root mem REG 3,2 141648 115286 /usr/local/lib/libclamunrar.so.3.0.4<br>MailScann 24194 root mem REG 0,0 0 [vdso] (stat: No such file or directory)<br>MailScann 24194 root mem REG 3,2 55132 555448 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so<br>
MailScann 24194 root mem REG 3,2 54320592 130122 /usr/lib/locale/locale-archive<br>MailScann 24194 root 0r CHR 1,3 1032 /dev/null<br>MailScann 24194 root 1w CHR 1,3 1032 /dev/null<br>
MailScann 24194 root 2w FIFO 0,5 159707 pipe<br>MailScann 24194 root 3u unix 0xc8f37280 159687 socket<br>MailScann 24194 root 4r REG 3,2 54524 313748 /usr/lib/MailScanner/MailScanner/CustomConfig.pm<br>
MailScann 24194 root 5r REG 3,2 22223 309813 /usr/lib/MailScanner/MailScanner/ConfigDefs.pl<br>MailScann 24194 root 6r REG 3,2 2727 309815 /usr/lib/MailScanner/MailScanner/CustomFunctions/GenericSpamScanner.pm<br>
MailScann 24194 root 7u REG 3,2 246784 65169 /var/spool/MailScanner/incoming/SpamAssassin.cache.db<br>MailScann 24194 root 8r REG 3,2 4374 672822 /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/VBounce.pm<br>
MailScann 24194 root 9uW REG 3,2 2004 539282 /var/spool/mqueue.in/qfm2ECYRM2000902<br>MailScann 24194 root 10uW REG 3,2 9212 504959 /var/spool/mqueue.in/dfm2ECYRM2000902<br>MailScann 24194 root 11uW REG 3,2 1211 539284 /var/spool/mqueue.in/qfm2ECYbPL000904<br>
MailScann 24194 root 12uW REG 3,2 39261 506889 /var/spool/mqueue.in/dfm2ECYbPL000904<br>MailScann 24194 root 13uW REG 3,2 1557 539288 /var/spool/mqueue.in/qfm2ECa1Wo000913<br>MailScann 24194 root 14uW REG 3,2 3554 539283 /var/spool/mqueue.in/dfm2ECa1Wo000913<br>
MailScann 24194 root 15uW REG 3,2 1315 539291 /var/spool/mqueue.in/qfm2ECb73n000926<br>MailScann 24194 root 16uW REG 3,2 7473 539286 /var/spool/mqueue.in/dfm2ECb73n000926<br>