Date: Thu, 21 Dec 2000 08:51:19 -0600 From: nathan <beemern@telecom.ksu.edu> To: mysql-freebsd <mysql-freebsd@home.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Weird /var behavior or was I hacked? Message-ID: <3A4218E7.40A8F22F@telecom.ksu.edu> References: <3.0.6.32.20001221094434.00963ad0@lh1.rdc2.pa.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
for more accurate results, try something like this du -k /var that will give you sizes for all files/dirs in/under /var and the total disk usage for /var man du for more info this will at least tell you WHERE the disk space is being hogged, and you can start tracing from there nathan mysql-freebsd wrote: > Hi: > > I found some pretty weird thing that i can't explain or solve so > I count on your help. > > I recently noticed growth in the size of occupied space on /var. > Here is output from "df" > > Filesystem 1K-blocks Used Avail Capacity Mounted on > <...> > /dev/da0s1h 1034159 766564 184863 81% /var > <...> > > In other words, out of about 1 GB partition 767 MB are filled. > On the other hand, I calculated total sum of all the files > in /var using two independent methods (ran ls -laR amd calculated > sum of sizes and tar'ed the whole patition and looked at the size > of the tar file). Both methods show that the sum of the > sizes of all the files in the partition comes to only 14 MB. > > There is this huge difference between 767 MB reported occupied by df > and 14 MB of the sum of all teh files. Looks as if somebody got > in, made an invisible partition within /var. > > Am I paranoid or missing something? Or both? > > Thanks for your help, > A.H. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A4218E7.40A8F22F>