How to check which package’s modules a particular process is using

F3rs3h3n
Jan 31, 2023

--

  1. Get PID of process.
ps aux | grep 'process name what you wanna check'
I picked up konsole

2. Check loaded modules by process using PID.

lsof -p 'PID'
Part of modules that konsole is using

3. Search modules by modules full path.

dpkg -S 'Full path of module'
libicudata.so.71.1 is included in libicu71

4. You can check what modules are included in package.

dpkg -L 'pacage name'
Can confirm libicudata.so.71.1 is included

References: https://isleofhoso.com/linux-lsof/
# Reference article is written in Japanese and it mentioned rpm package management system.

--

--

F3rs3h3n

Penetration Tester, Red Teamer | OSEP, OSCP, CRTO, CTMP