From owner-freebsd-questions@FreeBSD.ORG Mon Nov 5 10:38:50 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2060CC7A for ; Mon, 5 Nov 2012 10:38:50 +0000 (UTC) (envelope-from vince@unsane.co.uk) Received: from unsane.co.uk (unsane-pt.tunnel.tserv5.lon1.ipv6.he.net [IPv6:2001:470:1f08:110::2]) by mx1.freebsd.org (Postfix) with ESMTP id 889ED8FC0C for ; Mon, 5 Nov 2012 10:38:49 +0000 (UTC) Received: from vhoffman.lon.namesco.net (lon.namesco.net [195.7.254.102]) (authenticated bits=0) by unsane.co.uk (8.14.5/8.14.5) with ESMTP id qA5AclEk032515 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Mon, 5 Nov 2012 10:38:48 GMT (envelope-from vince@unsane.co.uk) Message-ID: <50979737.9080106@unsane.co.uk> Date: Mon, 05 Nov 2012 10:38:47 +0000 From: Vincent Hoffman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: Eugen Konkov Subject: Re: HELP: some process eat my /var References: <1397755241.20121102210553@yandex.ru> <5094847D.5000904@dreamchaser.org> <20628.35101.903869.363056@jerusalem.litteratus.org> <1314272547.20121105113245@yandex.ru> In-Reply-To: <1314272547.20121105113245@yandex.ru> X-Enigmail-Version: 1.4.5 Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit Cc: Robert Huff , FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 10:38:50 -0000 On 05/11/2012 09:32, Eugen Konkov wrote: > Здравствуйте, Robert. > > # du -h /var | sort -nr | head -n 25 > 976k /var/db/mysql/mysql > 892k /var/mail/freeline.in.ua/luda > 888M /var/log/radius/radacct/10.11.19.50 > 858M /var/crash > 840k /var/mail/freeline.in.ua/luda/cur > 836k /var/db/firebird/help > 608k /var/spool > 564k /var/db/pkg/perl-threaded-5.14.1_3 > 552k /var/spool/postfix > 512B /var/named/dev > 432k /var/db/ports > 412k /var/db/pkg/python26-2.6.7_2 > 392k /var/spool/postfix/defer > 354M /var/mail > 264k /var/db/pkg/libX11-1.4.4,1 > 244k /var/db/pkg/en-freebsd-doc-20110521 > 236k /var/tmp > 236k /var/mail/freeline.in.ua/znz2 > 224k /var/monit > 223M /var/log/radius/radacct/10.10.0.2 > 172M /var/mail/freeline.in.ua > 171M /var/mail/freeline.in.ua/office > 170M /var/mail/freeline.in.ua/office/cur > 158M /var/mail/kes.net.ua > 157M /var/mail/kes.net.ua/kes > > Something mistery take space, because of files take only 6.4G > # du -h -d 0 /var > 6.4G /var > > bug df says that there are more space was taken: > df -h > /dev/ada0s1d 30G 24G 3.5G 87% /var > > 6.4G vs 24G > Its possible that a process is holding open an unlinked file (some processes do this for tmp files as they are automatically deleted if the program exit, I believe mysql does it for tmp tables for example) I've had this happen when a log got rotated but the process wasnt notified so it kept writing to the file. I believe lsof +L1 will show unlinked but open files. Vince > > Вы писали 3 ноября 2012 г., 5:01:49: > > > RH> Gary Aitken writes: > >>> Looks like /var/log has most of it. >>> If you're running X, check for a huge Xorg.0.log. >>> I had this problem as a result of a radeon graphics card that would get into >>> some kind of reinitialization loop. >>> In any case, look at the files in /var/log > RH> A way to check disk usage: > > RH> du /var | sort -nr | head -n 25 > > RH> If you see something you don't recognize or that seems wrong > RH> .... > > > RH> Robert Huff > > > RH> _______________________________________________ > RH> freebsd-questions@freebsd.org mailing list > RH> http://lists.freebsd.org/mailman/listinfo/freebsd-questions > RH> To unsubscribe, send any mail to > RH> "freebsd-questions-unsubscribe@freebsd.org" > > > >