wehub-resource-sync
36b3af2e3d
PR Check / Code Quality: Format (push) Failing after 1s
PR Check / Code Quality: Lint (darwin) (push) Failing after 0s
PR Check / Code Quality: Lint (freebsd) (push) Failing after 1s
PR Check / Code Quality: Lint (windows) (push) Failing after 1s
PR Check / Code Quality: Lint (linux) (push) Failing after 1s
PR Check / Security: Vulnerability Scan (push) Failing after 0s
Update Documentation / update-docs (push) Failing after 2s
PR Check / Code Quality: Vendor (push) Failing after 1s
PR Check / Code Quality: Coverage (push) Failing after 0s
PR Check / Tests: Unit (macos-latest) (push) Has been cancelled
PR Check / Tests: Unit (ubuntu-24.04) (push) Has been cancelled
PR Check / Tests: Unit (ubuntu-24.04-arm) (push) Has been cancelled
PR Check / Tests: Unit (windows-latest) (push) Has been cancelled
88 lines
2.1 KiB
Markdown
88 lines
2.1 KiB
Markdown
## witr
|
|
|
|
Why is this running?
|
|
|
|
### Synopsis
|
|
|
|
witr explains why a process or port is running by tracing its ancestry.
|
|
|
|
```
|
|
witr [process name...] [flags]
|
|
```
|
|
|
|
### Examples
|
|
|
|
```
|
|
|
|
# Inspect a running process by name
|
|
witr nginx
|
|
|
|
# Look up a process by PID
|
|
witr --pid 1234
|
|
|
|
# Find the process listening on a specific port
|
|
witr --port 5432
|
|
|
|
# Find the process holding a file open
|
|
witr --file /var/lib/dpkg/lock
|
|
|
|
# Inspect a container by name
|
|
witr --container redis
|
|
|
|
# Inspect a process by name with exact matching (no fuzzy search)
|
|
witr bun --exact
|
|
|
|
# Show the full process ancestry (who started whom)
|
|
witr postgres --tree
|
|
|
|
# Show only warnings (suspicious env, arguments, parents)
|
|
witr docker --warnings
|
|
|
|
# Display only environment variables of the process
|
|
witr node --env
|
|
|
|
# Short, single-line output (useful for scripts)
|
|
witr sshd --short
|
|
|
|
# Disable colorized output (CI or piping)
|
|
witr redis --no-color
|
|
|
|
# Output machine-readable JSON
|
|
witr chrome --json
|
|
|
|
# Show extended process information (memory, I/O, file descriptors)
|
|
witr mysql --verbose
|
|
|
|
# Combine flags: inspect port, show environment variables, output JSON
|
|
witr --port 8080 --env --json
|
|
|
|
# Multiple inputs
|
|
witr nginx node
|
|
witr --port 8080 --port 3000
|
|
witr --pid 1234 --pid 5678
|
|
|
|
# Mixed inputs
|
|
witr nginx --pid 1234 --port 8080
|
|
|
|
```
|
|
|
|
### Options
|
|
|
|
```
|
|
-c, --container strings container(s) to look up (repeatable)
|
|
--env show environment variables for the process
|
|
-x, --exact use exact name matching (no substring search)
|
|
-f, --file strings file(s) held open by a process (repeatable)
|
|
-h, --help help for witr
|
|
-i, --interactive interactive mode (TUI)
|
|
--json show result as JSON
|
|
--no-color disable colorized output
|
|
-p, --pid strings pid(s) to look up (repeatable)
|
|
-o, --port strings port(s) to look up (repeatable)
|
|
-s, --short show only ancestry
|
|
-t, --tree show only ancestry as a tree
|
|
--verbose show extended process information
|
|
--warnings show only warnings
|
|
```
|
|
|