From owner-freebsd-questions@FreeBSD.ORG Fri Nov 2 19:06:00 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 238E0CDE for ; Fri, 2 Nov 2012 19:06:00 +0000 (UTC) (envelope-from kes-kes@yandex.ru) Received: from forward3.mail.yandex.net (forward3.mail.yandex.net [IPv6:2a02:6b8:0:602::3]) by mx1.freebsd.org (Postfix) with ESMTP id 2C5D38FC08 for ; Fri, 2 Nov 2012 19:05:59 +0000 (UTC) Received: from smtp3.mail.yandex.net (smtp3.mail.yandex.net [77.88.46.103]) by forward3.mail.yandex.net (Yandex) with ESMTP id D6D72B40EBE for ; Fri, 2 Nov 2012 23:05:57 +0400 (MSK) Received: from smtp3.mail.yandex.net (localhost [127.0.0.1]) by smtp3.mail.yandex.net (Yandex) with ESMTP id C26251BA0345 for ; Fri, 2 Nov 2012 23:05:57 +0400 (MSK) Received: from unknown (unknown [77.93.52.20]) by smtp3.mail.yandex.net (nwsmtp/Yandex) with ESMTP id 5tBKO3XR-5vBinYkj; Fri, 2 Nov 2012 23:05:57 +0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1351883157; bh=UeJB24QrThFVo9tqyzrf3SL+1D5PAly5u3hGyXpDz1Y=; h=Date:From:X-Mailer:Reply-To:Organization:X-Priority:Message-ID:To: Subject:MIME-Version:Content-Type:Content-Transfer-Encoding; b=t6GMKI2kyn0Laeq1ShEfgMJ4PhE8HepToUCL0FIb4FTcNkyH6oYW0fFwk8LSNkvVh p6CSKJnGCMAAIvbEVZiT1HhH+URZeXkQet93+E74aQ3PYGGSapZDmoIs8R5Vls5ErZ YaGZD9rtv3rLzhBSu5SRZiXwbH60HFWhN3WYWl1s= Date: Fri, 2 Nov 2012 21:05:53 +0200 From: Eugen Konkov X-Mailer: The Bat! (v4.0.24) Professional Organization: ISP FreeLine X-Priority: 3 (Normal) Message-ID: <1397755241.20121102210553@yandex.ru> To: FreeBSD Questions Subject: HELP: some process eat my /var MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Eugen Konkov List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 19:06:00 -0000 how to find which process take space? root@newflux:/var/log # cd /var root@newflux:/var # root@newflux:/var # root@newflux:/var # root@newflux:/var # root@newflux:/var # root@newflux:/var # df -h Filesystem Size Used Avail Capacity Mounted on /dev/ada0s1a 2G 455M 1.3G 25% / devfs 1.0k 1.0k 0B 100% /dev /dev/ada0s1e 3.9G 488M 3.1G 13% /tmp /dev/ada0s1f 37G 27G 7.3G 79% /usr /dev/ada0s1d 30G 23G 3.7G 87% /var /dev/ada0s1g 216G 8.0k 199G 0% /backup procfs 4.0k 4.0k 0B 100% /proc devfs 1.0k 1.0k 0B 100% /var/named/dev root@newflux:/var # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root fstat 97928 wd /var 2 drwxr-xr-x 512 r root csh 96949 wd /var 2 drwxr-xr-x 512 r root mc 96947 wd /var 802560 drwxr-xr-x 3072 r root csh 96124 wd /var 2 drwxr-xr-x 512 r root snmpd 96024 7 /var 804161 -rw-r----- 728 r root mpd5 51585 4 /var 3691792 -rw-r--r-- 6 rw freeradi radiusd 51554 3 /var 802703 -rw-r----- 0 w root inetd 22687 3 /var 3691804 -rw------- 5 w root cron 22392 wd /var 3772032 drwxr-x--- 512 r root cron 22392 3 /var 3691803 -rw------- 5 w smmsp sendmail 22311 wd /var 1926151 drwxrwx--- 512 r smmsp sendmail 22311 4 /var 1926203 -rw------- 51 w root sendmail 22202 wd /var 1926147 drwxr-xr-x 512 r root sendmail 22202 5 /var 3691802 -rw------- 80 w bind named 7370 wd /var 401288 drwxr-xr-x 512 r bind named 7370 root /var 401280 drwxr-xr-x 512 r bind named 7370 jail /var 401280 drwxr-xr-x 512 r root devd 5693 5 /var 3691824 -rw------- 4 w quagga bgpd 4616 3 /var 3691791 -rw-r--r-- 5 rw quagga zebra 4611 5 /var 3691788 -rw-r--r-- 5 rw root@newflux:/var # du -h -d 1 4.0k ./.snap 4.0k ./account 12k ./at 4.0k ./audit 3.1M ./backups 858M ./crash 8.0k ./cron 1.3G ./db 36k ./empty 4.0k ./heimdal 3.7G ./log 352M ./mail 8.0k ./msgs 1.6M ./named 4.0k ./preserve 108k ./run 4.0k ./rwho 608k ./spool 236k ./tmp 28k ./yp 4.0k ./games 4.0k ./agentx 4.0k ./cache 28k ./net-snmp 28k ./lost+found 212k ./monit 6.2G . -- Eugen mailto:kes-kes@yandex.ru