HELP: some process eat my /var

[Vincent Hoffman]

On 05/11/2012 09:32, Eugen Konkov wrote:
> Здравствуйте, Robert.
>
> # du -h /var | sort -nr | head -n 25
> 976k    /var/db/mysql/mysql
> 892k    /var/mail/freeline.in.ua/luda
> 888M    /var/log/radius/radacct/10.11.19.50
> 858M    /var/crash
> 840k    /var/mail/freeline.in.ua/luda/cur
> 836k    /var/db/firebird/help
> 608k    /var/spool
> 564k    /var/db/pkg/perl-threaded-5.14.1_3
> 552k    /var/spool/postfix
> 512B    /var/named/dev
> 432k    /var/db/ports
> 412k    /var/db/pkg/python26-2.6.7_2
> 392k    /var/spool/postfix/defer
> 354M    /var/mail
> 264k    /var/db/pkg/libX11-1.4.4,1
> 244k    /var/db/pkg/en-freebsd-doc-20110521
> 236k    /var/tmp
> 236k    /var/mail/freeline.in.ua/znz2
> 224k    /var/monit
> 223M    /var/log/radius/radacct/10.10.0.2
> 172M    /var/mail/freeline.in.ua
> 171M    /var/mail/freeline.in.ua/office
> 170M    /var/mail/freeline.in.ua/office/cur
> 158M    /var/mail/kes.net.ua
> 157M    /var/mail/kes.net.ua/kes
>
> Something mistery take space, because of files take only 6.4G
> # du -h -d 0 /var
> 6.4G    /var
>
> bug df says that there are more space was taken:
> df -h
> /dev/ada0s1d     30G     24G    3.5G    87%    /var
>
> 6.4G vs 24G
>
Its possible that a process is holding open an unlinked file (some
processes do this for tmp files as they are automatically deleted if the
program exit, I believe mysql does it for tmp tables for example)
I've had this happen when a log got rotated but the process wasnt
notified so it kept writing to the file.
I believe lsof +L1  will show unlinked but open files.



Vince

>
> Вы писали 3 ноября 2012 г., 5:01:49:
>
>
> RH> Gary Aitken writes:
>
>>>  Looks like /var/log has most of it.
>>>  If you're running X, check for a huge Xorg.0.log.
>>>  I had this problem as a result of a radeon graphics card that would get into
>>>  some kind of reinitialization loop.
>>>  In any case, look at the files in /var/log
> RH>         A way to check disk usage:
>
> RH>         du /var | sort -nr | head -n 25
>
> RH>         If you see something you don't recognize or that seems wrong
> RH> ....
>
>
> RH>                                         Robert Huff
>
>
> RH> _______________________________________________
> RH> freebsd-questions at freebsd.org mailing list
> RH> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> RH> To unsubscribe, send any mail to
> RH> "freebsd-questions-unsubscribe at freebsd.org"
>
>
>
>