Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
Open connections: 
php 3075 lemorpa 3u IPv4 1111738938 0t0 TCP> (ESTABLISHED) 

Recent Site Requests: *.mortgagenewshomeloans.com /a/a/Investment/p/p/Loans/Mortgage/News/Home/Loans/szh/home onlinemortgagemoiywi.lendersmor /tag/county/ *.mortgagenewshomeloans.com /Investments/Mortgage/News/Home/Loans/szh/Business-English- *.mortgagenewshomeloans.com /o/w/w/Mortgage/News/Home/Loans/Forex/szh/1 *.morgagemortgagebanker.com /Loan/szh/selectcity/yellowpages/ *.morgagemortgagebanker.com /Loan/szh/selectcity/yellowpages/ ratesmortgagemoroito.lendersmor /Contract/Contract_List.asp ratesmortgagemoroito.lendersmor /s/a/Rates/Rates/Mortgage/Mortgage/1st/szh/1 

Hostgator often send me this when they're mad of my CPU usage. I wonder what command they use to display this

share|improve this question
up vote 2 down vote accepted

First line is an extract from lsof command. Maybe a

Other lines maybe gathered from logs but I'm not sure.

share|improve this answer

The first is the output from lsof for single PID showing open network connections:

lsof -p 3075 -a -i TCP

The second is an extra from a web server log, it appears to be in the form:

client-ip vhost-name URI-path

You can get Apache to log directly in that format with CustomLog and/or LogFormat:

LogFormat "%a %v %U"

though it's almost certainly a grep | awk (or equivalent) from a more comprehensive log format.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.