Notes for the distribution of lsof version 4

********************************************************************
| The latest release of lsof is always available via anonymous ftp |
| from vic.cc.purdue.edu.  Look in pub/tools/unix/lsof.            |
********************************************************************

		Contents

	    Dialects Supported
	    How Lsof Works
	    Lsof Output
	    Getting Started Quickly
	    Limiting, Filtering, and Selecting Lsof Output
	    Parsing Lsof Output with Another Program
	    Repeat Mode
	    Distribution Restrictions
	    Cautions
	    Distribution Contents
	    Warranty
	    Bug Reports
	    The lsof-l Mailing List
	    Version 3 Release Notes
		3.0,  May 24, 1994
		...
		3.88, February 17, 1997
	    What's New in Version 4
	    Version 4 Release Notes
		4.0, February 24, 1997
		4.01, March 3, 1997
		4.02, March 21, 1997
		4.03, April 7, 1997
		4.04, April 17, 1997
		4.04 supplement, April 18, 1997
		4.05, April 24, 1997
		4.06, April 30, 1997
		4.07, May 12, 1997
		4.08, May 23, 1997
		4.09, June 1, 1997
		4.10, June 8, 1997
		4.11, June 12, 1997
		4.12, June 24, 1997
		4.13, July 9, 1997
		4.14, July 22, 1997
		4.15, August 15, 1997
		4.16, September 25, 1997
		4.17, October 14, 1997
		4.18, October 25, 1997
		4.19, October 30, 1997
		4.20, November 11, 1997
		4.21, December 1, 1997
		4.22, December 15, 1997
		4.23, January 16, 1998
		4.24, January 28, 1998
		4.25, February 7, 1998
		4.26, February 17, 1998
		4.27, March 6, 1998
		4.28, March 10, 1998


Dialects Supported
==================

Lsof (for LiSt Open Files) lists files opened by processes on
selected Unix systems.  Version 4 is a source reorganization of
version 3, itself a major revision of version 2.  Version 4 has
been tested on:

	AIX 4.1.[45] and 4.2[.1]
	BSDI BSD/OS 2.1 and 3.[01] for Intel-based systems
	DC/OSx 1.1 for Pyramid systems
	Digital UNIX (DEC OSF/1) 2.0, 3.2, and 4.0
	FreeBSD 2.1.[67], 2.2 and 3.0 for Intel-based systems
	HP-UX 9.01, 10.20, and 11.00
	IRIX 5.3, 6.2, 6.3, and 6.4
	Linux 2.0.3[012] and 2.1.79 for Intel-based systems
	NetBSD 1.[23] for Intel and SPARC-based systems
	NEXTSTEP 3.1
	OpenBSD 2.0 and 2.1 for Intel-based systems
	Reliant UNIX 5.43 for Pyramid systems
	RISC/os 4.52 for MIPS R2000-based systems
	SCO OpenServer Release 3.0 and 5.0.x for Intel-based systems
	SCO UnixWare 2.1.[12] for Intel-based systems
	Sequent PTX 2.1.9, 4.2.[13], 4.[34], and 4.4.[12]
	Solaris 2.3, 2.5.1, and 2.6
	SunOS 4.1.x
	Ultrix 4.2

(The pub/tools/unix/lsof/contrib directory on vic.cc.purdue.edu
contains information on other ports.)

If your favorite Unix dialect is not in the list, or if your version
of it is more recent than the ones listed, please contact me at
<abe@vic.cc.purdue.edu>.

Version 3 of lsof was tested on:

	AIX 3.2.5, 4.1[.[1234]], and 4.2
	BSDI BSD/OS 2.0, 2.0.1, and 2.1 for Intel-based systems
	DC/OSx 1.1 for Pyramid systems
	Digital UNIX (DEC OSF/1) 2.0, 3.0, 3.2, and 4.0
	EP/IX 2.1.1 for the CDC 4680
	FreeBSD 1.1.5.1, 2.0, 2.0.5, 2.1, 2.1.5 for Intel-based
		systems
	HP-UX 8.x, 9.x, 10.01, 10.10, and 10.20
	IRIX 5.2, 5.3, 6.0, 6.0.1, and 6.[124]
	Linux through 2.0.27 for Intel-based systems
	NetBSD 1.0, 1.1, and 1.2 for Intel and SPARC-based
		systems
	NEXTSTEP 2.1 and 3.[0123]
	OpenBSD 1.2 and 2.0 for Intel-based systems
	Reliant UNIX 5.43 for Pyramid systems
	RISC/os 4.52 for MIPS R2000-based systems
	SCO OpenServer Release 1.1, 3.0, and 5.0.x for Intel-based 
		systems
	SCO UnixWare 2.1 and 2.1.1 for Intel-based systems
	Sequent PTX 2.1.[1569], 4.0.[23], 4.1.[024], 4.2[.1],
		and 4.3
	Solaris 2.[123456], 2.5.1, and 2.6-Beta
	SunOS 4.1.x
	Ultrix 4.2, 4.3, 4.4, and 4.5

Version 3 and its predecessor, version 2, may be found at:

	ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/OLD


How Lsof Works
==============

Using available kernel data access methods -- getproc(), getuser(),
kvm_*(), nlist(), pstat(), read(), readx(), /proc -- lsof reads
process table entries, task table entries, user areas and file
pointers to reach the underlying structures that describe files
opened by processes.

Lsof interprets most file node structures -- advfsnodes, autonodes,
cnodes, cdrnodes, devnodes, fifonodes, gnodes, hsnodes, inodes,
mfsnodes, pcnodes, procnodes, rnodes, snodes, specnodes, s5inodes,
tmpnodes.  It understands NFS connections.  It recognizes FIFOs,
multiplexed files, Unix and Internet sockets.  It knows about
streams.  It understands /proc file systems for some dialects.  On
many dialects it recognizes execution text and library references.
It knows about AFS on some Unix dialects.


Lsof Output
===========

The lsof output describes:

    * the identification number of the process (PID) that has opened
      the file;

    * the process group identification number (PGRP) of the process
      (optional);

    * the process identification number of the parent process (PPID)
      (optional);

    * the command the process is executing;

    * the owner of the process;

    * for all files in use by the process, including the executing
      text file and the shared libraries it is using:

      * the file descriptor number of the file, if applicable;

      * the file's access mode;

      * the file's lock status;

      * the file's device numbers;

      * the file's inode number;

      * the file's size or offset;

      * the name of the file system containing the file;

      * any available components of the file's path name;

      * the names of the file's stream components;

      * the file's local and remote network addresses;

      * the TLI network (typically UDP) state of the file;

      * the TCP state, read queue length, and write queue length
	of the file;

      * the file's TCP window read and write lengths (Solaris
	only);

      * other file or dialect-specific values.


Getting Started Quickly
=======================

If you want to get started using lsof quickly, or see some examples
of how lsof can be used, consult the 00QUICKSTART file of the lsof
distribution.

The 00QUICKSTART file won't help you build or install lsof, but it
will cut through the density of the lsof man page, giving you more
readily an idea of what you can do with lsof.

For information on building and installing lsof, consult the 00README
file of the lsof distribution.


Limiting, Filtering, and Selecting Lsof Output
==============================================

Lsof accepts options to limit, filter, and select its output.
These are the possible criteria:

    * Process ID (PID) number -- to list the open files for a given
      process;

    * Process Group ID (PGRP) -- to list the open files for all
      the processes of a given process group;

    * User ID number or login name -- to list the open files for
      all the processes of a given user;

    * Internet address -- to list the open files using a given
      Internet address (host name), protocol, or port (number or
      name); or to list all open Internet files;

    * command name;

    * file descriptor name or number;

    * list all open NFS files;

    * list all open Unix domain socket files;

    * list all uses of a specific file;

    * list all open files on a file system.

Selection options are normally ORed -- i.e., an open file meeting
any of the criteria is listed.  The selection options may be ANDed
so that an open file will be listed only if it meets all the
criteria.

In the absence of any selection criteria, lsof lists files open to
all processes.


Parsing Lsof Output with Another Program
========================================

The lsof -F option directs it to produce "field" output that can
easily be parsed by another program.  The lsof distribution contains
sample awk, perl 4, and perl 5 scripts in its scripts subdirectory
that show how to post-process field output.


Repeat Mode
===========

Lsof can be directed to produce output, delay for a specified time,
then repeat the output, cycling until stopped by an interrupt or
quit signal.  This mode is useful for monitoring the status of some
file operation -- e.g., an ftp transfer or a tape backup operation.

Repeat mode is more efficient when combined with lsof's selection
options, since they limit lsof overhead.

It's possible to use lsof's field output options to supply repeat
mode output to another process for its manipulation.  The scripts
subdirectory of the lsof distribution has sample Perl scripts
showing how to consume lsof repeat mode output from a pipe.


Distribution Restrictions
=========================

Lsof may be used and distributed freely, subject to these limitations:

1. Neither the author nor Purdue University is responsible for
   any consequences of the use of this software.

2. The origin of this software must not be misrepresented, either
   by explicit claim or by omission.  Credit to the author and
   Purdue University must appear in documentation and sources.

3. Altered versions must be plainly marked as such, and must not
   be misrepresented as being the original software.

4. This notice may not be removed from or altered in the lsof source
   files.


Cautions
========

Lsof is a tool that is closely tied to the Unix operating system
version.  It uses header files that describe kernel structures and
reads kernel structures that typically change from OS version to
OS version.

DON'T TRY TO USE AN LSOF BINARY, COMPILED FOR ONE UNIX OS VERSION,
ON ANOTHER.

On some Unix dialects, notably SunOS and Solaris, lsof versions
may be even more restricted by architecture type.  An lsof binary,
compiled for SunOS 4.1.3 on a sun4c machine, for example, won't
work on a sun4m machine.

AN LSOF BINARY, COMPILED FOR ONE SOLARIS 1.X ARCHITECTURE, ISN'T
GUARANTEED TO WORK ON A DIFFERENT SOLARIS 1.X ARCHITECTURE.


Distribution Contents
=====================

The lsof distribution is checked for completeness when it is
constructed and by the Inventory script when you run the Configure
script.  (See The Inventory Script section of the 00README file of
this distribution.)

Lsof is organized in these parts:

    *  The main lsof directory, containing common sources,
       configuration and setup scripts and three subdirectories:
       dialects/, lib/, and scripts/.

       Lsof is compiled in the main lsof directory after configuration.
       The selected dialect sources are copied or linked from the
       specified subdirectory.  (Symbolic linking is the standard
       method.)

       Common lsof definitions may be found in lsof.h; common
       function prototypes, proto.h; and common storage, store.c.

    *  The dialects/ subdirectory contains subdirectories with
       sources specific to UNIX dialect implementations -- e.g.,
       the dialects/sun/ subdirectory contains sources for the
       SunOS (Solaris 1.x) and Solaris (2.x) implementations of
       lsof.  The dialects subdirectories also contain Makefiles
       and scripts for assisting dialect source configuration.

       Dialect configuration definitions may be found in dlsof.h;
       other dialect definitions, dlsof.h; dialect prototypes,
       dproto.h; and dialect storage, dstore.c.

    *  The lib/ subdirectory contains sources for common lsof
       functions.  Not all dialects use the functions -- some have
       their own versions of them.  The lib/ functions are enabled
       and customized with #define's in the dialect machine.h header
       files.

    *  The scripts/ subdirectory contains sample scripts for
       processing lsof field (-F) output.  The scripts are written
       in AWK, Perl 4, and Perl 5.

The 00PORTING file of the lsof distribution has more information
on lsof components, configuration, and construction.


Warranty
========

Lsof is provided as-is without any warranty of any kind, either
expressed or implied, including, but not limited to, the implied
warranties of merchantability and fitness for a particular purpose.
The entire risk as to the quality and performance of lsof is with
you.  Should lsof prove defective, you assume the cost of all
necessary servicing, repair, or correction.


Bug Reports
===========

Now that the obligatory disclaimer is out of the way, let me hasten
to add that I accept lsof bug reports and try hard to respond to
them.  I will also consider and discuss requests for new features,
ports to new dialects, or ports to new OS versions.

PLEASE DON'T SEND A BUG REPORT ABOUT LSOF TO THE UNIX DIALECT
VENDOR.

At worst such a bug report will confuse the vendor; at best, the
vendor will forward the bug report to me.

Please send all bug reports, requests, etc. to me via email at
<abe@purdue.edu>.


The lsof-l Mailing List
=======================

Information about lsof, including notices about the availability
of new revisions, may be found in mailings of the lsof-l listserv.
For more information about it, including instructions on how to
subscribe, read the 00LSOF-L file of the lsof distribution.


Version 3 Release Notes
=======================

See 00DIST in the last lsof 3 revision 3.88, for its complete
set of release notes.  Lsof revision 3.88 may be found at:

	ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/OLD

3.0		May 24, 1994
		This is the first official release of lsof 3.

...

3.88		February 17, 1997

		+======================================+
		| This is the last version 3 revision. |
		+======================================+

		Added documentation files -- 00.README.FIRST[_<version>]
		and 00RELEASE.SUMMARY_<version> -- to the distribution.


What's new in Version 4
=======================

The main goal of version 4 was to eliminate the confusing common/
fragment source file technique.  Changing the version number also
provided an opportunity to restart the numbering, which at 3.88
had risen to a large value.

The sources that appeared in the dialects/common subdirectory of
version 3 in fragment files have been incorporated into the version
4 liblsof.a library as *.c files.  This results in significant
changes to many source files, scripts, and Makefiles of all dialect
versions.  It allows elimination of some source files -- ddev.c,
dfile.c, dmnt.c -- for dialects now obtaining functions from
liblsof.a that formerly came from making dialect source files by
combining fragment files.

The version 4 liblsof.a sources are stored in the lib/ subdirectory
of the main lsof directory.  The liblsof.a functions are activated
and conditioned in their source files by values #define'd in the
dialect dlsof.h and machine.h header files.

Dialects that provide a private version of a library function refrain
from #define'ing the symbol that would activate the library function
code.


Version 4 Release Notes
=======================

4.0		February 24, 1997

		+====================================+
		| This is the first lsof 4 revision. |
		+====================================+

		Reorganized sources: eliminated code fragment files
		and created a library in their place.  Modified or
		deleted many dialect source and header files.
		Changed documentation accordingly.

		Added a warning to sgi/Makefile and 00FAQ that advises
		against using the IRIX C compiler -n32 option when
		compiling lsof.  Thanks go to Peter Ilieve
		<peter@memex.co.uk> for bringing this to my attention.

		Dropped IRIX 5.2 in mid-stream, because my 5.2 test
		system was upgraded to 5.3.

4.01		March 3, 1997
		Added TFS support for Pyramid dialects.

		Added test to Configure and to the IRIX dnode.c
		for the different cnode struct that appears in
		<cachefs/cachefs_fs.h> on the 6.2 IMPACT distribution.
		Heddy Boubaker <boubaker@amfou.cenatls.cena.dgac.fr>
		alerted me to the cnode change and helped test this
		lsof adjustment.

		Shut down the lsof child process before doing a -r
		sleep().  A comment from Dan Mercer <dam@mmm.com>
		prompted this.

4.02		March 21, 1997

		Based on a report from Pasi Kaara <Pasi.Kaara@atk.tpo.fi>,
		disabled HP-UX CCIT support in lsof for HP-UX
		versions 10 and above.  Pasi's report also led to
		changes in the HP-UX machine.h to support use of
		gcc to compile lsof for HP-UX 10.20 and warnings
		against using `cc -Aa` or `gcc -ansi` to compile
		lsof under HP-UX 10.x.

		With help from Richard Allen <ra@hp.is> taught
		HP-UX 10.x lsof to name file systems better by
		using the virtual file system device number.  Elias
		Halldor Agustsson <elias@rhi.hi.is> provided a test
		system.

		Changed NEXTSTEP and UNIXWARE Makefiles to use
		safer quoting when generating version.h.  The change
		was suggested by Bob Farmer <ucs_brf@unx1.shsu.edu>.

		Added SHELL=/bin/sh string to all Makefiles.

		Added support for Linux 2.1.28 on a test system,
		kindly provided by Jonathan Sergent <sergent@purdue.edu>.
		Configure tests the Linux 2.1.x's C library lseek()
		function for proper handling of kernel offsets.
		If lseek() appears suspect, Configure activates
		the use of a private lseek() function.  Changed
		the private nlist() function to nlist_private()
		and taught it to use the query_module() syscall in
		place of the deprecated get_kernel_syms() one.
		Added rudimentary AX.25 support for Pierfrancesco
		Caci <ik5pvx@infogroup.it> who helped test it.
		Updated the old get_kernel_syms() code to recognize
		and skip module name entries.

		Prompted by Marty Leisner <leisner@sdsp.mc.xerox.com>,
		eased the requirement that service name lookup for
		the -i option be accompanied by a protocol name.  The
		name is not needed if both TCP and UDP names yield the
		same port number.

		Added xusers.awk script from Dan Mercer <damercer@mmm.com>
		to the distribution scripts/ subdirectory.

		Changed Configure script to use LSOF_VERS for all
		UNIX dialect version numbers and to pass LSOF_VERS
		to the dialect Mksrc functions.  Also added the
		ability for a dialect stanza to declare a different
		dialect Makefile source.  Modified dialect Mksrc
		files -- e.g., linux and sun -- accordingly.

		Added support for BSD/OS 3.0 with help from Jim
		Reid <jim@mpn.cp.philips.com>.  Terry Kennedy
		<TERRY@spcvxa.spc.edu> kindly provided a test
		system.  During the port corrected a bug that
		prevented proper handling of revoked files.

4.03		April 7, 1997
		At the suggestion of Dan Mercer <damercer@mmm.com>,
		made HP-UX building of lsof aware of differences
		between the HP-UX bundled and unbundled C compilers.

		Added the ability for the lsof builder to define the
		default warning message issuance state.  By default the
		issuance of warning messages is disabled; defining
		WARNINGSTATE in machine.h disables it.  The Customize
		script was updated to handle WARNINGSTATE.  Dan Mercer
		suggested this.

		Eliminated compiler complaint about improperly cast
		get_Nl_value() argument in ncache_load() in lib/rnch.c.

		Corrected zeromem() argument error in SCO dproc.c.
		Sped up parent directory cache lookup slightly.

		Updated for PTX 4.4, including additional VxFS (EFS)
		file system support.

4.04		April 17, 1997
		At the suggestion of Bela Lubkin <belal@sco.COM>
		changed device cache handling to be more tolerant
		of a device cache file whose [cm]times are older
		than the ones on /dev or /devices.  The change
		required adding information to Solaris device cache
		file clone lines, so the first time lsof 4.04 is
		run under Solaris it will complain about a bad
		cached clone device in a previous device cache
		file, then regenerate it.

		Added boot file path detection for SCO OSR 5 and
		above, based on information supplied by Bela.

		Fixed two bugs in DEC OSF/1 lsof -- an error in
		reporting locks and a missing continue statement
		in readdev() after a failure to open a directory.
		Jan Ole Suhr <josuhr@informatik.tu-clausthal.de>
		reported the second bug and supplied a fix.

		Fixed XFS problems with IRIX 6.2 by abandoning the
		idea that SGI will distribute XFS header files and
		defining an lsof-private xfs_inode structure.  John
		Paul Morrison <John.Paul.Morrison@MultiActive.com>
		helped develop and test the 5.3 definition.  John
		R. Vanderpool <fish@daacdev1.gsfc.nasa.gov> helped
		develop and test the 6.2 definition.

		Remove obsolete comments about common/*.frag files.

		Updated Linux lsof for Linux version 2.1.35.

4.04		April 18, 1997
Supplement	Regenerated the 4.04 distribution to correct a non-
		device-cache #define misplacement in the Solaris and
		SunOS dlsof.h.  Alexandre Oliva <oliva@dcc.unicamp.br>
		reported the problem.

4.05		April 24, 1997
		Corrected an error in 00DCACHE.

		Made sure SCO /etc/ps/booted.systems is closed.

		Based on an observation by Bela Lubkin <belal@sco.COM>
		that the lsof child had needless file descriptors
		open, closed all but the open pipes between the
		lsof parent and child.

		Decommissioned CDC EP/IX support; I no longer have a
		test system.

		Based on a suggestion from Patrick Connor
		<connor@phreak.csd.sgi.com>, added -xansi to CFLAGS
		for IRIX 5.3 and 6.[234].

		Also at Patrick's suggestion changed Configure to
		propagate exact SunOS 4.1.x version to the main
		and library Makefiles.  This allowed the sunos413
		and sunos413cc Configure abbreviations to be
		shortened to sunos and sunoscc.

		Updated obsolete argument uses (-H changed to -n)
		in count_pf.perl* and watch_a_file.perl scripts.

		Adjusted Solaris 2.6 lsof for Beta_Update with tips
		from Casper Dik <casper@holland.Sun.COM>.

		Fixed a Solaris 2.4 TCP address reporting bug.

4.06		April 30, 1997
		Added a step to the Makefile clean rules that does
		a make clean in the lib subdirectory; suggested by
		Casper Dik <casper@holland.Sun.COM>.  (Configure's
		-clean argument already did this.)

		Fixed an incorrect awk argument in the sunos*)
		Configure stanza, reported by Alexandre Oliva
		<oliva@dcc.unicamp.br>.

		Added CD9660 (aka ISO) file system support to
		FreeBSD, NetBSD, and OpenBSD with mods and help
		from Kenneth Stailey <kstailey@disclosure.com>.
		(BSDI already had CD9660 support.)  While at it,
		added file descriptor system support to BSDI and
		FreeBSD.

		Added /kern file system support to OpenBSD.  The
		support wasn't extended to BSDI, FreeBSD, or NetBSD,
		because it requires Kenneth Stailey's changes to
		/sys/miscfs/kernfs/kernfs.h.

		Updated IRIX 6.3 support after getting access to
		a test system, provided by John Paul Morrison
		<John.Paul.Morrison@MultiActive.com>.  Improved
		the handling of IRIX 5.1 and greater FIFOs.

4.07		May 12, 1997
		Based on AIX problem reports from David Capshaw
		<David.Capshaw@SEMATECH.Org>, changed the aix*
		Configure script stanza to avoid -bnolibpath for
		gcc (which the GNU loader doesn't grok) and AIX
		below 4.1.4 (where -bnolibpath hasn't been tested
		or is known to be unimplemented), and to refuse to
		use gcc for compiling lsof in AIX versions below
		4.1 (because of possible structure alignment
		problems).  Updated 00FAQ appropriately.

		Added OpenBSD support for EXT2FS.  This support
		has yet to be tested.
		
		Tested lsof under OpenBSD 2.1.

		Activated /kern file system support for NetBSD when
		Configure senses that /sys/miscfs/kernfs/kernfs.h
		defines the kern_target structure.  This support
		has not been tested under NetBSD, although it has
		been tested under OpenBSD.

		Made some simple changes to the BSDI machine.h,
		suggested by Jeffrey C. Honig <jch@bsdi.com>.

		Improved handling of alternate dialect Configure
		abbreviations -- aix and aixgcc, hpux and hpuxgcc,
		solaris and solariscc, and sunos and sunoscc.

4.08		May 23, 1997
		Cleaned up dialect Makefile's, staring with a suggestion
		from Christopher Schanzle <chris@cam.nist.gov>.

		Improved Configure's -clean processing.

		Corrected bugs in Solaris lock reporting.

		Changed NetBSD Configure stanza to put -I/usr/include
		before -I/sys.

4.09		June 1, 1997
		Adjusted for latest FreeBSD 3.0 release.  This
		required adding a new kernel name cache module for
		reading BSD-form hashed kernel name cache entries,
		rnmh.c, to the lsof library, and adding a #define
		to each machine.h to select it.

		Activated rnmh.c for BSDI 2.1, BSDI 3.0, NetBSD
		1.2, and OpenBSD 2.1.

4.10		June 8, 1997
		Adjusted for Linux 2.1.x (x > 35) kernels with
		hashed task structure pointers.  Marty Leisner
		<leisner@sdsp.mc.xerox.com> and Jonathan Sergent
		<sergent@io.com> tested the adjustment.

		Replaced readdev() stat() calls with lstat() to
		reduce device table and cache entries with the same
		device number and inode values.  Added code to
		remove all remaining duplicates.  This fixes a
		Linux problem reported by Jonathan Sergent and
		makes device node name output predictable.

		Corrected a bug in UnixWare stream file handling
		that prevented searching for the stream file by
		its associated character device name.

		Added Pyramid code to determine Reliant UNIX clone
		major device number differently from that of DC/OSx.

4.11		June 12, 1997
		Changed Configure to sense that the PTX inp_[fl]addr
		members of the inpcb structure of <netinet/in_pcb.h>
		have a struct type and set HASINADDRSTR for use in
		PTX dnode.c and dsock.c tests.

		Changed PTX version 4.1.4 tests to use 4.1.3 instead.
		Carson Wilson <carson@mcs.com> reported the need
		to do this and tested the change.

		Fixed a block device table indexing bug in lib/rdev.c,
		reported by Carson Wilson.  The same bug was squashed
		in pyramid/ddev.c.

		Added code to the Pyramid Reliant UNIX kread()
		function to compensate for an address boundary
		error in the kernel's /dev/kmem driver.

		Verified that lsof compiles and works under AIX
		4.2.1.  Added an AIX test for the presence of NFS
		header files, defined HAS_NFS and adjusted AIX
		dialect sources accordingly.

		Based on a suggestion from Gaylord Holder
		<holder@phy.ucsf.EDU>, added DEC OSF/1 code to
		auto-detect the booted file, whence kernel symbol
		addresses are obtained.

4.12		June 24, 1997
		Corrected a device number sign extension problem
		in the reading and writing of device cache file.
		The problem was reported by Bela Lubkin <belal@sco.com>
		and he suggested a fix.

		Fixed an SCO stream device lookup problem.  The
		report and solution came from Bela Lubkin

		Enhanced the Configure script to enable cross-
		configuration of lsof, based on suggestions from
		Marty Leisner <leisner@sdsp.mc.xerox.com>.  A new
		documentation file, 00XCONFIG, describes the process.

		Made Pyramid OBJFS support conditional on the
		presence of supporting header files.  Corrected
		the Pyramid MkKernOpts script so it generates the
		necessary -D's for the Nile/Jolt architecture.
		Richard Coley <rcoley@pyra.co.uk> helped.

		Added another IRIX xfs_inode variant for 6.2, 32
		bits, no XFS rollup patch.

		Tested under UnixWare 2.1.2.

4.13		July 9, 1997
		Taught Pyramid lsof to grok ttyfs vnodes with help
		from Richard Coley <rcoley@pyra.co.uk>.  Fixed some
		minor bugs in Pyramid FIFO reporting.  Eliminated
		use of the Pyramid UCB compatibility library at
		Richard's suggestion.

		Eliminated reporting of "strange" inode numbers
		for SCO OSR 3.2v5.0.x HPPS files with help from
		Bela Lubkin <belal@sco.com>

		Modified port to service name lookup to use a small
		number of getservbyport() calls before reading the
		entire map with getservent().  Changed port reporting
		to represent a zero as `*' to be consistent with
		other prt number reporting tools like netstat.
		Casper Dik <casper@holland.Sun.COM> suggested these
		changes -- the getserv*() one to improve performance
		for large NIS service name maps.

		Changed all readdev() functions to make the absence
		of block devices a warning instead of a fatal error
		after Brian Redman <ber@ms.com> reported his IRIX
		6.4 system had no block devices.  (It really did
		have block devices, but readdev()'s lstat() use
		caused it to miss them in a directory symbolically
		linked from /dev/dsk->/hw/disk.)  Fixed Brian's
		real problem by changing the IRIX readdev() to use
		stat() on /dev nodes if a Configure test shows /hw
		is readable.  Extended the potential to do the same
		to all readdev() functions.

		For consistency and convenience changed some
		Configure abbreviations and dialect subdirectory
		names:  "decosf" abbreviation and "osf" dialect
		subdirectory name to "du"; "netbsd" dialect
		subdirectory name to "n+obsd"; "next3" abbreviation
		and "next" dialect subdirectory name to "ns"; "sco"
		abbreviation and dialect subdirectory name to "osr";
		"sgi" dialect subdirectory name to "irix"; and
		"unixware" abbreviation and dialect subdirectory
		name to "uw".

		Added #if/#endif clauses to the AIX rmdupdev()
		function to avoid clone processing for AIX versions
		less than 4.1.4.  The problem was reported by Toralf
		Foerster <toralf.foerster@io-warnemuende.de>, who
		supplied corrective code.

		Added support for new style NetBSD inode with i_ffs
		and i_e2fs union members.

		Improved Configure and 00FAQ information on Digital
		UNIX configuration subdirectory with suggestions
		from Brad Krebs <brad@EECS.Berkeley.EDU>.

4.14		July 22, 1997
		Reorganized the Solaris handling of the inode
		structure header file, ufs_inode.h, to eliminate
		VxFS structure definition conflicts for Solaris
		2.4, based on information from Greg Earle
		<earle@netbsd4me.jpl.nasa.gov>.

		Cleaned up some typos and confusion in Configure's
		help output, based on comments from Bela Lubkin
		<belal@sco.com>

		Added a 00DIALECTS file, containing UNIX dialect
		version numbers, that can be used by Configure and
		the man page.

4.15		August 15, 1997
		Aligned `Configure -help` output better.  Removed
		Configure's 2.6 Beta test adjustments.

		Added improved Solaris VxFS configuration and
		handling, based on information from Greg Earle
		<earle@netbsd4me.jpl.nasa.gov>.

		Added socket state -- TCO or TPI -- for socket
		files at the suggestion of Ian Fitchet
		<I.D.Fitchet@ftel.co.uk>.

4.16		September 25, 1997
		Added reporting of TCP/TPI queue lengths and window
		sizes ala netstat to NAME column.  Added -T option
		to select or deselect TCP/TPI info reporting.
		(Window sizes are only reported for Solaris.)
		Fixed anomalies along the way in SIZE/OFF processing
		for some dialects.

		Fixed service name argument processor to allow
		minus signs as part of the name.  Consequently this
		disallows names with embedded minus signs from
		being specified as the start of a range.

		Added 00FAQ entries explaining why lsof won't find
		a file being edited with vi, why window sizes aren't
		reported for all dialects, and what the "no more
		information" message means.

		Forced Pyramid CC to be /usr/ccs/bin/cc to avoid
		accidental use of the BSD variant in /usr/ucb/cc.

		Added support for Linux glibc2, including a Configure
		test; cross-Configure support (00XCONFIG); and much
		unfortunate and risky sleight-of-hand in lsof Linux
		dialect header and source files, forced upon lsof
		by incompatibilities between Linux kernel and glibc2
		header files.

		Included in scripts/identd.perl5 a Perl 5 implementation
		of an identd server, using lsof, provided by Kapil
		Chowksey <kchowksey@hss.hns.com>.

		Updated IRIX 6.4 xfs_inode guess.

4.17		October 14, 1997
		Added -V option for verbose search result reporting.
		Verbose reports are prepared for failure to locate
		file names, command names, Internet addresses or
		files, login names, NFS files, PIDs, PGRPs, and UIDs.

		Augmented Linux NFS file test to cope with kernels
		whose NFS code is in a loadable module.  Need for
		the test was pointed out by Jonathan Sergent
		<sergent@csociety.ecn.purdue.edu>.  The change
		required that Linux have private dmnt.c source,

		Completed a Linux 2.1.57 port on a system provided
		by Jonathan Sergent.

4.18		October 25, 1997
		Eliminated memory leaks in alloc_lfile(), lkup_port(),
		and NeXTSTEP's process_text() function.

		Added recognition of OpenBSD 2.2 in Configure,
		supplied by Kenneth Stailey <kstailey@disclosure.com>.

		Consolidated print_file() functions to use the one
		in lib/prtf.c.  Made it configurable and changed
		it to size print columns dynamically.

		!!! WARNING !!!

		WITH DYNAMICALLY SIZED PRINT COLUMNS LSOF 4.18
		PRODUCES OUTPUT SIGNIFICANTLY DIFFERENT FROM THAT
		OF PREVIOUS REVISIONS.  LINES ARE GENERALLY SHORTER
		AND THERE IS GENERALLY LESS BLANK SPACE BETWEEN
		COLUMNS AND THE ITEMS IN THEM.  THERE ARE NO LONGER
		ANY SPACES BETWEEN DEVICE NUMBER ELEMENTS, ONLY
		COMMAS.

		!!! WARNING !!!

		Added special types and print specification modifiers
		for file size and offset to handle UNIX dialects
		with 64 bit sizes and offsets.  Paul Eggert
		<eggert@twinsun.com> reported the need for this
		addition.

		With Paul Eggert's help picked lint from the lsof
		library, the main level lsof sources, and the Sun
		dialect sources.

		Added documentation, including the file 00LSOF-L,
		about the lsof-l LISTSERV.

		Added support for Reliant UNIX on the RM600.  Bob
		Passarella <rmpassar@pyramid.com> supplied the
		changes.  Kevin Smith <kevin@pyramid.com> helped
		arrange test systems.  While incorporating Bob's
		changes, modified lib/rnch.c to handle kernel ncache
		structs whose name is accessed via a char *, rather
		than in a char array.

		Changed #include order of <sys/socketvar.h> for
		Solaris 2.x.  W. Richard Stevens <rstevens@kohala.com>
		pointed out the need to do this.

4.19		October 30, 1997
		Changed Pyramid Reliant RM600 proc scan to skip
		SSYS (p_flag) processes, since they don't seem to
		have a readable u_cdir vnode.

		Enabled Pyramid Reliant UNIX kread() work-around
		for DC/OSx, too, since its read(/dev/kmem) kernel
		driver seems to share the page boundary bug this
		work-around circumvents.

		Changed SzOffFtm_d and SzOffFtm_dv (new formats at
		4.18 to print size and offset) from signed to
		unsigned.  Setting them signed at 4.18 was an
		oversight.

		Plugged a memory leak that caused the loss of 130
		bytes per repeat-mode pass.  Fixed it with a simple
		work-around in main().  Lionel Cons <Lionel.Cons@cern.ch>
		reported the leak.

4.20		November 11, 1997
		Tested under BSDI 3.1.

		Added support for Reliant UNIX Mesh IPC files with
		help from Billy Ho <bho@pyramid.com>.

		Added support to Digital UNIX lsof that uses the
		libmsfs tag_to_path() function (when it exists) to
		look up AdvFS path names.  The idea and sample code
		came from Dean Brock <brock@cs.unca.edu>.  Converted
		Dean's code into more general purpose support for
		private name cache lookups via the HASPRIVNMCACHE
		#define in the dialect machine.h file and code
		conditional on it in the printname() function.

		Taught Digital UNIX lsof to recognize NFS3 file
		systems.  Corrected Digital UNIX lsof DEVICE column
		alignment.

4.21		December 1, 1997
		Squashed bug, introduced at revision 4.18, that
		resulted in double reporting of each selected PID
		when terse mode (-t) was specified.

		Corrected minor bug, also introduced at 4.18, that
		might cause an extra print_proc() pass when one
		PID has been specified.

		Added -R to lsof options in scripts/idrlogin.perl*.
		The option should have been there -- it was supposed
		to be mandatory for PGRP reporting -- but a bug,
		corrected in revision 4.18, previously made -R
		unnecessary.

		Enabled configuring for BSDI 4.0 per a suggestion
		from Jeff Honig <jch@bsdi.com>.

		Enabled replacement of scoff_t with off64_t (scoff_t
		is used to type r_size and r_localsize in the rnode
		struct) for IRIX 5.3 systems that have the NFS
		kernel rollup patch (1477).  This compensates for
		SGI's failure to distribute an updated <sys/fs/rnode.h>
		with their patch.

		Validated under Linux 2.0.3[12], Linux 2.1.64, and
		NetBSD 1.3.

		Added FreeBSD root directory reporting, courtesy
		of Dan Nelson <dnelson@emsphone.com>.

4.22		December 15, 1997
		Made adjustments for Linux 2.1.7[02].

		Improved NAME information for Linux UNIX domain
		sockets.

		Added option +|-M to control the reporting of
		portmapper registration information in square
		brackets after the TCP or UDP port or service name.
		Kenneth Stailey <kstailey@disclosure.com> suggested
		the feature and provided sample code from OpenBSD.
		Reporting is disabled by default in the distribution
		and may be enabled with +M; if lsof is compiled
		with HASPMAPENABLED (e.g., from machine.h), reporting
		will be enabled by default and can be disabled with
		-M.

		Changed the -w option to +|-w to match the syntax
		of the +|-M option and to eliminate any options
		that flip meaning when a symbol is defined at
		compile time.  For both +|-M and +|-w, specifying
		`-' when the default state is disabled or specifying
		`+' when the default state is enabled causes no
		problems.

	!!!WARNING  The -w option has changed in lsof 4.22.  WARNING!!!

		Made the +|- prefix legal for most options, but
		didn't document it in the man page or help panel.
		Most options that disable something -- e.g., -b,
		-C, -n, -P -- now disable when the prefix is `-'
		and enable when it is `+'.  Since the states these
		options disable are enabled by default, I chose to
		avoid documentation complexity and confusion by
		not mentioning that they can be used with the `+'
		prefix.

		Condensed the help panel.

		Made sure Digital UNIX Configure stanza puts normal
		include path (e.g., /usr/include) before system
		include paths.

		Added IPX socket information reporting to Linux
		with help from Jonathan Sergent <sergent@purdue.edu>.

4.23		January 16, 1998
		Fixed conflict arising from the quondam replacement
		of the Sun Solaris <netdb.h> with a BIND/BSD version.

		With help from Jonathan Sergent <sergent@purdue.edu>
		developed a /proc file system based Linux lsof.
		It needs some Linux 2.1.x release to work -- I'm
		not sure which, but I tested under 2.1.72, 2.1.76,
		and 2.1.79.  The Configure script selects special
		sources for this lsof, so the full lsof distribution
		now contains both /dev/kmem and /proc based sources
		for Linux lsof.  An optional kernel mod, written
		by Jonathan, enhances the /proc-based lsof ability
		to recognize IPX socket files.  Reorganized and
		augmented the Linux sections in 00FAQ to explain
		the two types of Linux lsof.

		Defined DOSTAT_FUNCTION for dostat() in misc.c to
		select the function, stat() or lstat(), it will use.
		DOSTAT_FUNCTION is normally undefined, defaults to
		lstat(), and is only defined for the /proc-based
		Linux lsof in its dlsof.h.

		Made conditional on the presence of IRX 6.4 XFS
		rollup patch #6 an XFS node change introduced in
		revision 4.16.   Identified the patch with help
		from John R. Vanderpool <fish@daacdev1.gsfc.nasa.gov>.

		Added NFS node compensation for NetBSD 1.3.  The
		code and suggestion for it was supplied by Jean-Luc
		Richier <richier@imag.fr>.

		Added diagnostic messages to the /dev/kmem-based
		Linux Mksrc script to report errors during the
		construction of the kernel name cache header file,
		kncache.h.  Added 00FAQ information on kncache.h.

		Added a new Linux test host, running 2.0.33 and
		GlibC, provided by Steve Logue <stevel@mail.cdsnet.net>.

		Ported to PTX 4.1.3 and 4.4.2.  Adjusted lib/rnch.c
		for 4.4.2 to allow customization f additional ncache
		struct element names.

4.24		January 28, 1998
		Changed /proc-based Linux lsof offset test to use "/"
		instead of "/etc/passwd".

		To assist Jim Mintha <jim@geog.ubc.ca> with the
		packaging of lsof for Debian Linux, added a
		DEBIAN_LINUX_LSOF #define to trigger the activation
		of special system map file location code in the
		/dev/kmem-based dproc.c.

		Applied modification to dialects/bsdi/dlsof.h from
		Ingimar Robertson <iar@skyrr.is>, enabling lsof to
		compile for BSDI BSD/OS 2.0.

		Corrected a documentation error in 00DCACHE, pointed
		out by Thomas Anders <anders@hmi.de>.  The error was
		created when the -V option was added at lsof 4.17.

		Made IRIX 5.3 through 6.3 lsof aware of IRIX SCSI
		tape devices (e.g., /dev/tape).  Dave Olson of SGI
		and Randolph J. Herber of FNAL provided valuable
		advice, and Igor Schein <ischein@air-boston.com>
		helped test.

		Added a machine.h symbol (NEVER_HASDCACHE) that
		prevents Customize from offering to change HASDCACHE.
		The symbol may appear anywhere in machine.h --
		e.g., in a comment.  Included the symbol in a
		comment of the HASDCACHE section of the /proc-based
		Linux lsof machine.h, and accompanied it with
		warnings against #define'ing HASDCACHE.  Did the
		same thing for WARNDEVACCESS (NEVER_WARNDEVACCESS
		is the suppressant.)

4.25		February 7, 1998
		Corrected an IRIX mis-cast of file offset (position).
		Igor Schein <ischein@air-boston.com> reported the
		problem.  This was offered as a patch to 4.24.
		Picked some lint Igor pointed out.

		At Igor's suggestion added an optional decimal
		digit size argument to the -o option.  This argument
		specifies how many file offset decimal digits can
		follow "0t" before lsof switches to a "0x..." form.
		The argument size specification doesn't count the
		two characters of the "0t".  A size of 0 means
		unlimited.  The default is OFFDECDIG (8), preserving
		compatibility with existing lsof output; it can be
		changed by the lsof builder.  When size is specified
		with -o it does not force offset display; -o without
		a size still must be used to do that.

		Added an IRIX 6.2, 32 bit system, XFS node patch,
		courtesy of Ulrich Bernhard <rzubu@rzu.unizh.ch>.

		For my own convenience enabled Configure to use
		/usr/local/bin/gcc for NeXTSTEP.  This allows
		circumvention of a gcc 2.8.0 ranlib problem on
		my test 3.1 `040 cube.

		Added flags recommended by the RISC/os and Ultrix
		compilers for the updated (and longer) main.c.

		Updated FreeBSD cd9660_node.h Configure test.

4.26		February 17, 1998
		Added shared process group processing for IRIX 5.3,
		and IRIX 6.1 and above, based on investigation of
		a bug report from Igor Schein <ischein@air-boston.com>.
		Igor helped test this addition.

		Improved handling of file system name arguments.
		It's now done in a manner similar to fuser.  The
		-f argument forces path names to be considered as
		simple files, rather than as file system names.
		The +f flag forces them to be considered as file
		system names.  Normally path arguments are considered
		file system names when they match a mounted-on
		directory in the system's mount table, or when they
		match a mounted file system's block device.  Igor
		Schein helped test this change.

		Igor also suggests that the proper compilation of
		the IRIX 6.4 proc structure after patch 2536 has
		been installed may need -DPIOMEMOPS.  So lsof's
		MkKernOpts script was updated to propagate that
		option from CCOPTS in /var/sysgen/system/irix.sm,
		even though patch 2536 doesn't add -DPIOMEMOPS to
		it.  Added a 00FAQ item on this patch.

		Added a fatal warning message about names forced
		to be file system names (with +f) that have no
		match in the mount table.

		Improved the -V message for files and file systems
		for which no open files were found.  Added reporting
		of /proc file and file system search failures.

		Did some code reorganization to combine the multiple
		ck_file_arg() funcions into one.  Moved the new
		function from the library to the top level and put
		it in arg.c; moved the usage function from arg.c
		to a new top-level source file, usage.c, to balance
		top-level source file size.  The new usage.c depends
		on version.h; arg.c no longer does.

		Added flag recommended by the DU compiler for the
		updated (and longer) main.c.

4.27		March 6, 1998
		At the request of Igor Schein <ischein@air-boston.com>
		added a conditional repeat mode option, using the
		`+' prefix to the `r' option.  +r operates as does
		-r with the exception that it exits the first time
		no open files have been listed during a cycle.
		The exit code will be zero when any open files have
		been listed; one, if none were ever listed.

		Ported lsof to HP-UX 11.0 with the help of Richard
		Allen.  This port hasn't been tested on a 64 bit
		kernel; I'm sure it won't work there without more
		mods.  It may not work on PA 2 architectures; I've
		only tested it under PA 1 and a separate, busy
		tester reported PA 2 problems that I've been unable
		to investigate.

		In anticipation of getting access to a 64 bit HP-UX
		kernel and the pending start of the Solaris 2.7
		Beta test (It will have 64 bit kernel addressing.),
		started adding support for 64 bit kernel pointers.
		This includes: ubiquitous use of the KA_T cast
		for kernel pointers; a format to print them,
		KA_T_FMT_X; a function to print them, print_kptr();
		and modifications to most kernel-related functions
		-- e.g., process_file(), process_node(),
		process_socket(), readvfs() -- to process kernel
		addresses as KA_T types.

		Fixed minor bug in handling path name arguments
		that end with a `/'.

		Removed support for RISCos; its test system is no
		longer available.

		Made modifications to insure that lsof output
		doesn't contain non-printable characters.  All such
		characters are now printed in the printf form
		"\x%02x".  Several new common functions were
		installed in misc.c to support "safe" printing.
		This second major modification in 4.27 to common
		and dialect code could have introduced bugs not
		yet detected.

4.28		March 10, 1998
		Refined unprintable format to use \b, \f, \r, \n,
		\t, and ^* (for CTRL) forms.  Corrected omission
		of safestrprt() use for field output command name.
		These changes were offered as patches to 4.27.

		Made space an unprintable character (\x20) in the
		COMMAND column; printable elsewhere, including the
		NAME column, field output, and error messages.

		Made sure FD column is parsable as a single entity
		-- i.e., has no embedded space.  Thus, if the access
		mode is unknown but there is a known lock mode, (a
		very rare case) the access mode will be printed as
		`-'.

		Picked lint with gcc 2.8.0 under Solaris 2.6.

		With the help of Dave Olson of SGI identified a
		proc struct element that should have been added to
		<sys/proc.h> by IRIX 6.4 patch 2536.  Added a
		work-around for it to the lsof Configure script.
		Igor Schein <ischein@air-boston.com> identified
		that the patch caused a proc structure length
		complaint from lsof.  Removed an obsolete 00FAQ
		item on the patch, installed at lsof 4.26, explaining
		that no solution was yet available.

		Added a 00FAQ item on how BIND installs its own
		header files, including <netdb.h>, which may cause
		the rpcent struct definition to vanish.  Solaris
		has an automatic lsof work-around, but that hasn't
		been (and probably can't be) propagated to all
		dialects supported by lsof.  The 00FAQ item recommends
		re-installation of the vendor header files that
		BIND has replaced.  (Others include <rpcent.h>,
		<sys/bitypes.h>, and <sys/ctypes.h>.)

		Made AIX AFS fixes.

Vic Abell <abe@purdue.edu>
Purdue University Computing Center
March 10, 1998