$ sudo lsof /var/log/messages COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME rsyslogd 419 root 7w REG 179,2 58189 2581 /var/log/messages