Date: Wed, 18 Oct 2006 14:34:19 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Giorgos Keramidas <keramida@ceid.upatras.gr> Cc: Paul Murphy <paul.murphy@cogeco.ca>, freebsd-questions@freebsd.org, root@rithy4u.net Subject: Re: File system full Message-ID: <45362D5B.3060401@infracaninophile.co.uk> In-Reply-To: <20061018125755.GB15285@gothmog.pc> References: <45357AF8.1020101@rithy4u.net> <20061018014819.GA72686@gothmog.pc> <45360C5F.4090400@cogeco.ca> <20061018125755.GB15285@gothmog.pc>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig7A9B6FA425AFFC64173F2816
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: quoted-printable
Giorgos Keramidas wrote:
> On 2006-10-18 07:13, Paul Murphy <paul.murphy@cogeco.ca> wrote:
>> Giorgos Keramidas wrote:
>>> On 2006-10-18 07:53, "Office of CEO- rithy4u.NET" <root@rithy4u.net> =
wrote:
>>>> Dear All,
>>>> My firewall server was running out of space on / partition I
>>>> have try to reboot/fsck and delete all unneccessary files
>>>> inside / but I still get 12 MB of free space with total 495 MB
>>>> worth of that partition. Any ideas?
>>> First of all, try to track down where all the space has gone, by
>>> using `df' and `du' with the -x option. For example, you can get
>>> a good idea of which places in your root filesystem are the top-10
>>> users of space with:
>>>
>>> # cd /
>>> # du -xm . | sort -nr | head -10
>>>
>>> If this doesn't show up a lot of stuff, then there's probably a
>>> rogue process which has opened a file and then removed it, so
>>> it's not directly visible by traversing the tree with `du', but
>>> you can still look for it with:
>>>
>>> # fstat -f / | sort -k +8
>>>
>>> After you get this sort of information, we can make more informed
>>> suggestions about the best way to move forward :)
>> I have been trying to track down a similar problem! Using the above
>> method I think I have found 'natd' to be the culprit. Should 'natd'
>> receive a signal when 'alias.log' rolls over? Restarting 'natd' seems
>> to have releases some megabytes.
>=20
> Nice catch, Paul!
>=20
> The `alias.log' file is supposed to be in `/var/log', but I guess if yo=
u
> use a single root filesystem for everything, this can end up filling th=
e
> root filesystem.
>=20
> The file `alias.log' is not rotated by `newsyslog.conf', so maybe we
> should add it there? Then we can let `newsyslog' signal `natd' by:
>=20
> %%%
> diff -r 4474abb9619a etc/newsyslog.conf
> --- a/etc/newsyslog.conf Fri Oct 13 17:34:54 2006 +0300
> +++ b/etc/newsyslog.conf Wed Oct 18 15:54:52 2006 +0300
> @@ -18,6 +18,7 @@
> #
> # logfilename [owner:group] mode count size when flags [/=
pid_file] [sig_num]
> /var/log/all.log 600 7 * @T00 J
> +/var/log/alias.log 600 7 100 * JC /var/run/natd.pid
> /var/log/amd.log 644 7 100 * J
> /var/log/auth.log 600 7 100 * JC
> /var/log/console.log 600 5 100 * J
> %%%
>=20
> Can you please add this line to your newsyslog.conf file and let it run=
> for a while to see if it prevents the `alias.log' file of `natd' to fil=
l
> your /var/log filesystem?
>=20
> I don't use `natd', so I can't test this myself for a long enough
> period.
natd doesn't do the close and re-open all filehandles thing on receipt
of SIGHUP which pretty much makes it unsuitable for use with newsyslog.
(SIGHUP is caught by natd, but the only thing it does is cause natd to
update its idea of what the IP address is on the nat'ed interface.)
There doesn't seem to be any signal that you can send natd with the
usual 'reread all config files and re-open all file descriptors'
effect that most daemons understand.
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. Flat 3
7 Priory Courtyard
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW, UK
--------------enig7A9B6FA425AFFC64173F2816
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFNi1g8Mjk52CukIwRAw6xAJ42LB/OUqvx77VU8dCdYjvWJVcedACdHuNB
lHWtuls5XNSljbqP96sCxRg=
=q/HA
-----END PGP SIGNATURE-----
--------------enig7A9B6FA425AFFC64173F2816--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45362D5B.3060401>