Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 11 Sep 2011 18:33:53 -0400
From:      "illoai@gmail.com" <illoai@gmail.com>
To:        =?KOI8-R?B?68/O2MvP1yDl18fFzsnK?= <kes-kes@yandex.ru>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: How to check where space is LOST
Message-ID:  <CAHHBGkqu3i8CtUea=1G9aiYMnS2K%2BktoMg9RUjkXjXQnrBi7DQ@mail.gmail.com>
In-Reply-To: <955223604.20110912012332@yandex.ru>
References:  <955223604.20110912012332@yandex.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
2011/9/11 =EB=CF=CE=D8=CB=CF=D7 =E5=D7=C7=C5=CE=C9=CA <kes-kes@yandex.ru>:
> Hi.
>
> I notice that some times /var is overfull
>
> # df -h
> Filesystem =9A =9A Size =9A =9AUsed =9A Avail Capacity =9AMounted on
> /dev/ad1s1a =9A =9A496M =9A =9A239M =9A =9A217M =9A =9A52% =9A =9A/
> devfs =9A =9A =9A =9A =9A1.0K =9A =9A1.0K =9A =9A =9A0B =9A 100% =9A =9A/=
dev
> /dev/ad1s1e =9A =9A124M =9A =9A 40K =9A =9A114M =9A =9A 0% =9A =9A/tmp
> /dev/ad1s1f =9A =9A1.8G =9A =9A1.1G =9A =9A596M =9A =9A65% =9A =9A/usr
> /dev/ad1s1d =9A =9A989M =9A =9A349M =9A =9A561M =9A =9A38% =9A =9A/var
> devfs =9A =9A =9A =9A =9A1.0K =9A =9A1.0K =9A =9A =9A0B =9A 100% =9A =9A/=
var/named/dev
>
> # cd /var/
>
> # du -h -d 1
> 2.0K =9A =9A./.snap
> 2.0K =9A =9A./account
> 6.0K =9A =9A./at
> 2.0K =9A =9A./audit
> =9A12K =9A =9A./backups
> 4.0K =9A =9A./crash
> 4.0K =9A =9A./cron
> 2.0K =9A =9A./empty
> 2.0K =9A =9A./heimdal
> =9A79M =9A =9A./log
> =9A19M =9A =9A./mail
> 4.0K =9A =9A./msgs
> 159K =9A =9A./named
> 2.0K =9A =9A./preserve
> =9A60K =9A =9A./run
> 2.0K =9A =9A./rwho
> =9A70K =9A =9A./spool
> =9A14K =9A =9A./tmp
> =9A24K =9A =9A./yp
> 2.0K =9A =9A./games
> 2.0K =9A =9A./agentx
> =9A22K =9A =9A./net-snmp
> 4.0K =9A =9A./lost+found
> =9A98M =9A =9A.
>
> If I just #reboot system. I get that on /var is only 98M used.
>
> # df -h
> Filesystem =9A =9A Size =9A =9AUsed =9A Avail Capacity =9AMounted on
> /dev/ad1s1a =9A =9A496M =9A =9A239M =9A =9A217M =9A =9A52% =9A =9A/
> devfs =9A =9A =9A =9A =9A1.0K =9A =9A1.0K =9A =9A =9A0B =9A 100% =9A =9A/=
dev
> /dev/ad1s1e =9A =9A124M =9A =9A 40K =9A =9A114M =9A =9A 0% =9A =9A/tmp
> /dev/ad1s1f =9A =9A1.8G =9A =9A1.1G =9A =9A596M =9A =9A65% =9A =9A/usr
> /dev/ad1s1d =9A =9A989M =9A =9A 98M =9A =9A891M =9A =9A12% =9A =9A/var
> devfs =9A =9A =9A =9A =9A1.0K =9A =9A1.0K =9A =9A =9A0B =9A 100% =9A =9A/=
var/named/dev
>
> How to obtain what take space on /var
>

You probably have a process that is holding a file open
that has been rotated or deleted.  Probably a log file.

sysutils/lsof can help.

Also, once you track down which
process is holding open files, you should try to find out
why (/etc/syslog.conf is a suspect, obviously).


--=20
--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHHBGkqu3i8CtUea=1G9aiYMnS2K%2BktoMg9RUjkXjXQnrBi7DQ>