From owner-freebsd-questions@FreeBSD.ORG Fri Feb 6 19:05:56 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B014710656D1 for ; Fri, 6 Feb 2009 19:05:56 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: from email1.allantgroup.com (email1.emsphone.com [199.67.51.115]) by mx1.freebsd.org (Postfix) with ESMTP id 69B2D8FC20 for ; Fri, 6 Feb 2009 19:05:56 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by email1.allantgroup.com (8.14.0/8.14.0) with ESMTP id n16J5tqk043401 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 6 Feb 2009 13:05:55 -0600 (CST) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (smmsp@localhost [127.0.0.1]) by dan.emsphone.com (8.14.3/8.14.3) with ESMTP id n16J5tgb029427 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 6 Feb 2009 13:05:55 -0600 (CST) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.14.3/8.14.3/Submit) id n16J5rej029424; Fri, 6 Feb 2009 13:05:53 -0600 (CST) (envelope-from dan) Date: Fri, 6 Feb 2009 13:05:53 -0600 From: Dan Nelson To: "Gelsema, P (Patrick) - FreeBSD" Message-ID: <20090206190553.GB13084@dan.emsphone.com> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-OS: FreeBSD 7.1-STABLE User-Agent: Mutt/1.5.18 (2008-05-17) X-Virus-Scanned: ClamAV version 0.94.1, clamav-milter version 0.94.1 on email1.allantgroup.com X-Virus-Status: Clean X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (email1.allantgroup.com [199.67.51.78]); Fri, 06 Feb 2009 13:05:55 -0600 (CST) X-Scanned-By: MIMEDefang 2.45 Cc: freebsd-questions@freebsd.org Subject: Re: /var grows, apache open file, which file? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Feb 2009 19:05:57 -0000 In the last episode (Feb 06), Gelsema, P (Patrick) - FreeBSD said: > I noticed that my var slice is getting eaten by apache. The amount of free > space is getting less and less per day. So I started to investigate. > > I did the following; > > # fstat -u www | grep var | more > www httpd 97042 9 /var 74653 -rw------- 176907484 w > www httpd 97042 12 /var 71575 -rw------- 1345623 w > www httpd 97042 13 /var 24693 -rw-r--r-- 0 w > www httpd 97042 15 /var 70919 -rw------- 0 w > www httpd 97042 16 /var 70919 -rw------- 0 w > www httpd 26059 9 /var 74653 -rw------- 176907484 w > www httpd 26059 12 /var 71575 -rw------- 1345623 w > > So I have an Inumber, lets search for that. > > # find / -inum 74653 > /usr/ports/net/pptpclient/files > > This confuses me! That is on a different slice. Then that is not the inode you are looking for. Use "find -x /var ..." to limit the search to just the /var mountpoint. Your problem is probably due to a bad logfile rotator that isn't signalling apache to close&reopen the logs, so it keeps logging to a file you have deleted. If you're using newsyslog, make sure you have listed your apache pidfile on the line correspoinding to any apache logs so it knows which process to signal. See the newsyslog.conf manpage for more details. -- Dan Nelson dnelson@allantgroup.com