Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Sep 2004 09:49:24 -0500
From:      Paul Schmehl <pauls@utdallas.edu>
To:        shahid@zonewave.net
Cc:        FreeBSD-questions <questions@freebsd.org>
Subject:   Re: Phantom /var full messages
Message-ID:  <B2230B47178C9E38431A941A@utd49554.utdallas.edu>
In-Reply-To: <33696.81.86.192.91.1094813921.squirrel@www.zonewave.net>
References:  <44A044721750C2FA9877513F@utd49554.utdallas.edu> <33696.81.86.192.91.1094813921.squirrel@www.zonewave.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--On Friday, September 10, 2004 11:58:41 AM +0100 shahid@zonewave.net wrote:

>> I'm running snort 2.1.3 and mysql 3.23.58 on FreeBSD 4.9 RELEASE.  All
>> applications are built from ports.
>>
>> Periodically I get /var full messages and everything comes to a grinding
>> halt.  The problem is, /var isn't full.
>>
>> df -h will show /var at 104%, but du -h /var shows /var at 40% (for
>> example).  If I shut down snort and mysql, wait for a minute and then
>> start
>> them back up, df agrees with du again.
>
> The best thing to do is increase some more space in /var (as default it is
> 256MB?) - you need to mount /var somehow to 400MB. How to do that?

How in the world would that help?  (BTW, /var is 31GB)  The problem isn't 
that I'm running out of space.  The problem is that df *thinks* I'm out of 
space, most likely because of a filehandle problem (but I'll confirm that 
here once I figure it out.)

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B2230B47178C9E38431A941A>