Date: Tue, 22 Mar 2005 15:42:57 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Gavin Atkinson <gavin.atkinson@ury.york.ac.uk> Cc: Dan Nelson <dnelson@allantgroup.com> Subject: Re: Interesting fs usage issue Message-ID: <20050322234257.GA32750@xor.obsecurity.org> In-Reply-To: <20050322201611.U36639@ury.york.ac.uk> References: <20050322200539.10469.qmail@gem-wbe04> <20050322201611.U36639@ury.york.ac.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
--x+6KMIRAuhnl3hBn Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 22, 2005 at 08:17:29PM +0000, Gavin Atkinson wrote: > On Tue, 22 Mar 2005, David D.W. Downey wrote: >=20 > > > > > > You probably have a process holding a reference to a file that's been > > > unlinked. Run "fstat -f /tmp" to see. > > > > > > > fbdev# fstat -f /tmp > > USER CMD PID FD MOUNT INUM MODE SZ|DV R/W > > fbdev# > > > > Nothing shows at *all*. Which is weird. I've currently several screen > > sessions open, which uses /tmp (as seen by an ls of /tmp which shows > > the proper timestamps as expected for each session). > > > > Would that not generate a response from fstat since the screens are > > active? >=20 > fstat is currently broken in -CURRENT. > http://lists.freebsd.org/mailman/htdig/freebsd-current/2005-March/047656.= html >=20 > I have no idea if the lsof port will still work since those changes, I > suspect not but it might be worth a try. It currently does not even compile :) Kris --x+6KMIRAuhnl3hBn Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFCQK2BWry0BWjoQKURAv1RAKDTnIG2RKpkXRgACU03Rmzupo2dQwCeMkKm flPq7OUjdqZi+hkZz3SZxHk= =WOGq -----END PGP SIGNATURE----- --x+6KMIRAuhnl3hBn--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050322234257.GA32750>