Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 02 Nov 2012 20:42:05 -0600
From:      Gary Aitken <ah@dreamchaser.org>
To:        Eugen Konkov <kes-kes@yandex.ru>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: HELP: some process eat my /var
Message-ID:  <5094847D.5000904@dreamchaser.org>
In-Reply-To: <1397755241.20121102210553@yandex.ru>
References:  <1397755241.20121102210553@yandex.ru>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Looks like /var/log has most of it.
If you're running X, check for a huge Xorg.0.log.
I had this problem as a result of a radeon graphics card that would get into
some kind of reinitialization loop.
In any case, look at the files in /var/log

On 11/02/12 13:05, Eugen Konkov wrote:
> 
> how to find which process take space?
> 
> 
> root@newflux:/var/log # cd /var
> root@newflux:/var #
> root@newflux:/var #
> root@newflux:/var #
> root@newflux:/var #
> root@newflux:/var #
> root@newflux:/var # df -h
> Filesystem      Size    Used   Avail Capacity  Mounted on
> /dev/ada0s1a      2G    455M    1.3G    25%    /
> devfs           1.0k    1.0k      0B   100%    /dev
> /dev/ada0s1e    3.9G    488M    3.1G    13%    /tmp
> /dev/ada0s1f     37G     27G    7.3G    79%    /usr
> /dev/ada0s1d     30G     23G    3.7G    87%    /var
> /dev/ada0s1g    216G    8.0k    199G     0%    /backup
> procfs          4.0k    4.0k      0B   100%    /proc
> devfs           1.0k    1.0k      0B   100%    /var/named/dev
> root@newflux:/var # fstat -f /var
> USER     CMD          PID   FD MOUNT      INUM MODE         SZ|DV R/W
> root     fstat      97928   wd /var          2 drwxr-xr-x     512  r
> root     csh        96949   wd /var          2 drwxr-xr-x     512  r
> root     mc         96947   wd /var     802560 drwxr-xr-x    3072  r
> root     csh        96124   wd /var          2 drwxr-xr-x     512  r
> root     snmpd      96024    7 /var     804161 -rw-r-----     728  r
> root     mpd5       51585    4 /var     3691792 -rw-r--r--       6 rw
> freeradi radiusd    51554    3 /var     802703 -rw-r-----       0  w
> root     inetd      22687    3 /var     3691804 -rw-------       5  w
> root     cron       22392   wd /var     3772032 drwxr-x---     512  r
> root     cron       22392    3 /var     3691803 -rw-------       5  w
> smmsp    sendmail   22311   wd /var     1926151 drwxrwx---     512  r
> smmsp    sendmail   22311    4 /var     1926203 -rw-------      51  w
> root     sendmail   22202   wd /var     1926147 drwxr-xr-x     512  r
> root     sendmail   22202    5 /var     3691802 -rw-------      80  w
> bind     named       7370   wd /var     401288 drwxr-xr-x     512  r
> bind     named       7370 root /var     401280 drwxr-xr-x     512  r
> bind     named       7370 jail /var     401280 drwxr-xr-x     512  r
> root     devd        5693    5 /var     3691824 -rw-------       4  w
> quagga   bgpd        4616    3 /var     3691791 -rw-r--r--       5 rw
> quagga   zebra       4611    5 /var     3691788 -rw-r--r--       5 rw
> root@newflux:/var # du -h -d 1
> 4.0k    ./.snap
> 4.0k    ./account
>   12k    ./at
> 4.0k    ./audit
> 3.1M    ./backups
> 858M    ./crash
> 8.0k    ./cron
> 1.3G    ./db
>   36k    ./empty
> 4.0k    ./heimdal
> 3.7G    ./log
> 352M    ./mail
> 8.0k    ./msgs
> 1.6M    ./named
> 4.0k    ./preserve
> 108k    ./run
> 4.0k    ./rwho
> 608k    ./spool
> 236k    ./tmp
>   28k    ./yp
> 4.0k    ./games
> 4.0k    ./agentx
> 4.0k    ./cache
>   28k    ./net-snmp
>   28k    ./lost+found
> 212k    ./monit
> 6.2G    .
> 
> 




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?5094847D.5000904>