http://www.jackxiang.com/index.php zh-cn http://www.jackxiang.com/post/7761/ jack <xdy108@126.com> Tue, 27 Jan 2015 08:06:27 +0000 http://www.jackxiang.com/post/7761/ 这个是一个进程，并且21263是21326的父进程，如果我知道某个子进程的ID号，如何找到他的父进程是哪个？
prod 21326 21263   0 02:04:41 ?           0:00 /p05/product/oracle10g/iAS/bin/httpd -d /p05/
最好是用：ps -ef --forest
-l,l long          u  user-oriented   --sort --tty --forest --version
ps aux --forest
\_ sshd: xiangdong [priv]
|   \_ sshd: xiangdong@pts/7,pts/17,pts/10,pts/14,pts/15
|       \_ -bash
|       |   \_ su -
|       |       \_ -bash
|       \_ -bash
|       |   \_ su -
|       |       \_ -bash
|       \_ -bash
|       |   \_ su -
|       |       \_ -bash
|       |           \_ ps aux --forest
|       \_ -bash
|       |   \_ su -
|       |       \_ -bash
|       \_ -bash
|           \_ su -
|               \_ -bash
|                   \_ [httpmut: master process] H?????5?"


如nginx和php-fpm：
root     32550     1  0  2014 ?        00:00:00 nginx: master process ../sbin/nginx
www        730 32550  0 Jan26 ?        00:00:01  \_ nginx: worker process
www        731 32550  0 Jan26 ?        00:00:00  \_ nginx: worker process
www        732 32550  0 Jan26 ?        00:00:01  \_ nginx: worker process

root      6482     1  0  2014 ?        00:00:00 php-fpm: master process (/usr/local/php/etc/php-fpm.conf)              
www       6483  6482  0  2014 ?        00:05:20  \_ php-fpm: pool www                                                      
www       6484  6482  0  2014 ?        00:05:26  \_ php-fpm: pool www                                                      
和ps aux|grep nginx一样的结果。

——————————————————————————————————————————————————

方法一：
lsof好像可以:
[root@test ~]# lsof -p 10555 COMMAND     PID USER   FD   TYPE    DEVICE    SIZE      NODE NAME multipepo 10555  www  cwd    DIR       8,3    4096   6065736 /home/xiangdong/multepoolserver multipepo 10555  www  rtd    DIR       8,3    4096         2 / multipepo 10555  www  txt    REG       8,3   57403   6065755 /home/xiangdong/multepoolserver/multipepollserver (deleted) multipepo 10555  www  mem    REG       8,3  139416  10125622 /lib64/ld-2.5.so multipepo 10555  www  mem    REG       8,3 1717800  10125623 /lib64/libc-2.5.so multipepo 10555  www  mem    REG       8,3  615136  10125624 /lib64/libm-2.5.so multipepo 10555  www  mem    REG       8,3  145824  10125627 /lib64/libpthread-2.5.so multipepo 10555  www  mem    REG       8,3   53448  10125631 /lib64/librt-2.5.so multipepo 10555  www  mem    REG       8,3   58400  32515445 /lib64/libgcc_s-4.1.2-20080825.so.1 multipepo 10555  www  mem    REG       8,3  976312  18907168 /usr/lib64/libstdc++.so.6.0.8 multipepo 10555  www  DEL    REG      0,20         992418204 /dev/shm/test multipepo 10555  www    0u   CHR     136,6                 8 /dev/pts/6 multipepo 10555  www    1u   CHR     136,6                 8 /dev/pts/6 multipepo 10555  www    2u   CHR     136,6                 8 /dev/pts/6 multipepo 10555  www    3r  FIFO       0,6         992414555 pipe multipepo 10555  www    4w  FIFO       0,6         992414555 pipe multipepo 10555  www    5r   REG       8,3   57403   6065755 /home/xiangdong/multepoolserver/multipepollserver (deleted) multipepo 10555  www    6u  IPv4 992418205               TCP *:webcache (LISTEN) multipepo 10555  www    7r  0000      0,11       0 992418206 eventpoll

方法二：
ps -ef|awk '$2 ~ /pid/{print $2}'
pid :子进程ID
ps -ef|awk '$2 ~ /10555/{print $2}'

方法三：
ps -ef --forest
www      10555     1  0 15:08 pts/6    00:00:00 [httpmut: worker process] H????

摘处：http://bbs.chinaunix.net/thread-1810739-1-1.html ]]> http://www.jackxiang.com/post/7761/#blogcomment63994 1 <user@domain.com> Sun, 15 Mar 2020 09:41:27 +0000 http://www.jackxiang.com/post/7761/#blogcomment63994