30 Useful ‘ps Command’ Examples for Linux Process Monitoring

ps (processes status) is a native Unix/Linux utility for viewing information concerning a selection of running processes on a system: it reads this information from the virtual files in the /proc filesystem. It is one of the important utilities for system administration specifically under process monitoring, to help you understand whats is going on in a Linux system.

It has numerous options for manipulating its output, however, you’ll find a small number of them practically useful for daily usage.

Read Also: All You Need To Know About Processes in Linux [Comprehensive Guide]

In this article, we’ll look at 30 useful examples of ps commands for monitoring active running processes on a Linux system.

Note that ps produces output with a heading line, which represents the meaning of each column of information, you can find the meaning of all the labels on the ps man page.

List All Processes in Current Shell

1. If you run the ps command without any arguments, it displays processes for the current shell.

$ ps 
List Current Running Processes
List Current Running Processes

Print All Processes in Different Formats

2. Display every active process on a Linux system in generic (Unix/Linux) format.

$ ps -A
OR
$ ps -e
List Processes in Standard Format
List Processes in Standard Format

3. Display all processes in BSD format.

$ ps au
OR
$ ps axu
List Processes in BSD Format
List Processes in BSD Format

4. To perform a full-format listing, add the -f or -F flag.

$ ps -ef
OR
$ ps -eF
List Processes in Long List Format
List Processes in Long List Format

Display User Running Processes

5. You can select all processes owned by you (runner of the ps command, root in this case), type:

$ ps -x 

6. To display a user’s processes by real user ID (RUID) or name, use the -U flag.

$ ps -fU tecmint
OR
$ ps -fu 1000
List User Processes by ID
List User Processes by ID

7. To select a user’s processes by effective user ID (EUID) or name, use the -u option.

$ ps -fu tecmint
OR
$ ps -fu 1000

Print All Processes Running as Root (Real and Effective ID)

8. The command below enables you to view every process running with root user privileges (real & effective ID) in user format.

$ ps -U root -u root 
Display Root User Running Processes
Display Root User Running Processes

Display Group Processes

9. If you want to list all processes owned by a certain group (real group ID (RGID) or name), type.

$ ps -fG apache
OR
$ ps -fG 48
Display Group Processes
Display Group Processes

10. To list all processes owned by effective group name (or session), type.

$ ps -fg apache

Display Processes by PID and PPID

11. You can list processes by PID as follows.

$ ps -fp 1178
List Processes by PID
List Processes by PID

12. To select process by PPID, type.

$ ps -f --ppid 1154
List Process by PPID
List Process by PPID

13. Make a selection using a PID list.

$ ps -fp 2226,1154,1146
List Processes by PIDs
List Processes by PIDs

Display Processes by TTY

14. To select processes by tty, use the -t flag as follows.

$ ps -t pts/0
$ ps -t pts/1
$ ps -ft tty1
List Processes by TTY
List Processes by TTY

Print Process Tree

15. A process tree shows how processes on the system are linked to each other; processes whose parents have been killed are adopted by the init (or systemd).

$ ps -e --forest 
List Process Tree
List Process Tree

16. You can also print a process tree for a given process like this.

$ ps -f --forest -C sshd
OR
$ ps -ef --forest | grep -v grep | grep sshd 
List Tree View of Process
List Tree View of Process

Print Process Threads

17. To print all threads of a process, use the -L flag, this will show the LWP (lightweight process) as well as NLWP (number of the lightweight processes) columns.

$ ps -fL -C httpd
List Process Threads
List Process Threads

Specify Custom Output Format

Using the -o or –format options, ps allows you to build user-defined output formats as shown below.

18. To list all format specifiers, include the L flag.

$ ps L

19. The command below allows you to view the PID, PPID, user name, and command of a process.

$ ps -eo pid,ppid,user,cmd
List Processes with Names
List Processes with Names

20. Below is another example of a custom output format showing file system group, nice value, start time, and elapsed time of a process.

$ ps -p 1154 -o pid,ppid,fgroup,ni,lstart,etime
List Process ID Information
List Process ID Information

21. To find a process name using its PID.

$ ps -p 1154 -o comm=
Find Process using PID
Find Process using PID

Display Parent and Child Processes

22. To select a specific process by its name, use the -C flag, this will also display all its child processes.

$ ps -C sshd
Find Parent Child Process
Find Parent-Child Process

23. Find all PIDs of all instances of a process, useful when writing scripts that need to read PIDs from an std output or file.

$ ps -C httpd -o pid=
Find All Process PIDs
Find All Process PIDs

24. Check the execution time of a process.

$ ps -eo comm,etime,user | grep httpd

The output below shows the HTTPD service has been running for 1 hour, 48 minutes, and 17 seconds.

Find Process Uptime
Find Process Uptime

Troubleshoot Linux System Performance

If your system isn’t working as it should be, for instance, if it’s unusually slow, you can perform some system troubleshooting as follows.

26. Find top running processes by highest memory and CPU usage in Linux.

$ ps -eo pid,ppid,cmd,%mem,%cpu --sort=-%mem | head
OR
$ ps -eo pid,ppid,cmd,%mem,%cpu --sort=-%cpu | head
Find Top Running Processes
Find Top Running Processes

27. To kill Linux processes/unresponsive applications or any process that is consuming high CPU time.

First, find the PID of the unresponsive process or application.

$ ps -A | grep -i stress

Then use the kill command to terminate it immediately.

$ kill -9 2583 2584
Find and Kill a Process
Find and Kill a Process

Print Security Information

28. Show security context (specifically for SELinux) like this.

$ ps -eM
OR
$ ps --context
Find SELinux Context
Find SELinux Context

29. You can also display security information in a user-defined format with this command.

$ ps -eo  euser,ruser,suser,fuser,f,comm,label
List SELinux Context by Users
List SELinux Context by Users

Perform Real-time Process Monitoring Using Watch Utility

30. Finally, since ps displays static information, you can employ the watch utility to perform real-time process monitoring with repetitive output, displayed after every second as in the command below (specify a custom ps command to achieve your objective).

$ watch -n 1 'ps -eo pid,ppid,cmd,%mem,%cpu --sort=-%mem | head'
Real Time Process Monitoring
Real-Time Process Monitoring

Important: ps only shows static information, to view frequently updated output you can use tools such as htop; top, and glances: the last two are in fact Linux system performance monitoring tools.

You might also like to read the following related articles.

  1. How to Find a Process Name Using PID Number in Linux
  2. Find Top Running Processes by Highest Memory and CPU Usage in Linux
  3. A Guide to Kill, Pkill, and Killall Commands to Terminate a Process in Linux
  4. How to Find and Kill Running Processes in Linux
  5. How to Start Linux Command in Background and Detach Process in Terminal

That’s all for now. If you have any useful ps command example(s) to share (not forgetting to explain what it does), use the comment form below.

Hey TecMint readers,

Exciting news! Every month, our top blog commenters will have the chance to win fantastic rewards, like free Linux eBooks such as RHCE, RHCSA, LFCS, Learn Linux, and Awk, each worth $20!

Learn more about the contest and stand a chance to win by sharing your thoughts below!

Aaron Kili
Aaron Kili is a Linux and F.O.S.S enthusiast, an upcoming Linux SysAdmin, web developer, and currently a content creator for TecMint who loves working with computers and strongly believes in sharing knowledge.

Each tutorial at TecMint is created by a team of experienced Linux system administrators so that it meets our high-quality standards.

Join the TecMint Weekly Newsletter (More Than 156,129 Linux Enthusiasts Have Subscribed)
Was this article helpful? Please add a comment or buy me a coffee to show your appreciation.

12 Comments

Leave a Reply
  1. Hello again

    Other error “17. To print all threads of a process, use the -H flag, this will show the LWP (lightweight process) as well as NLWP (number of lightweight process) columns.” – Must be “-L“.

    Reply
  2. Excellent tutorial.

    About “14. To select processes by tty, use the -t flag as follows.”

    The 2 first commands are incorrect, must be “pst” not “pts” (In the screen appears fine)

    I really enjoy read and learn from your tutorials

    a cold beer for you!

    Reply
  3. There is an error in the screenshot in “12. To select process by PPID” paragraph.

    In the text, you wrote:

    "ps -f --ppid 1154"
    

    But the screenshot contains: “ps -f –pid 1154”, and the process having this PID

    Reply
  4. I need to access each of the process (pid cannot be used as a unique identity since we need that for a learning procedure) cpu cycle count. And store it in an array or any data structure.Can I have such a C program written.

    Reply

Got Something to Say? Join the Discussion...

Thank you for taking the time to share your thoughts with us. We appreciate your decision to leave a comment and value your contribution to the discussion. It's important to note that we moderate all comments in accordance with our comment policy to ensure a respectful and constructive conversation.

Rest assured that your email address will remain private and will not be published or shared with anyone. We prioritize the privacy and security of our users.