Linux Administration Cookbook

ps

ps, which is used to show a snapshot of the current processes on a system, is a first port of call for many admins, and with good reason:

$ ps -efUID PID PPID C STIME TTY TIME CMDroot 1 0 0 Dec09 ? 00:00:03 /usr/lib/systemd/systemd --switched-root --system --droot 2 0 0 Dec09 ? 00:00:00 [kthreadd]root 3 2 0 Dec09 ? 00:00:01 [ksoftirqd/0]root 5 2 0 Dec09 ? 00:00:00 [kworker/0:0H]root 7 2 0 Dec09 ? 00:00:00 [migration/0]root 8 2 0 Dec09 ? 00:00:00 [rcu_bh]root 9 2 0 Dec09 ? 00:00:01 [rcu_sched]<SNIP>root 2690 2 0 15:28 ? 00:00:01 [kworker/0:1]postfix 2756 1065 0 15:42 ? 00:00:00 pickup -l -t unix -uroot 2759 2 0 15:43 ? 00:00:00 [kworker/0:2]root 2783 2 0 15:48 ? 00:00:00 [kworker/0:0]vagrant 2800 2636 0 15:50 pts/0 00:00:00 ps -ef

As noted, ...