Date: Mon, 22 Sep 2025 07:15:56 +0200 From: freebsd@vanderzwan.org To: Andrea Venturoli <ml@netfence.it> Cc: questions@freebsd.org Subject: Re: [List] Cannot find out what uses space in ZFS dataset Message-ID: <E579D721-8042-46C3-9F7B-2444580135D2@vanderzwan.org> In-Reply-To: <9B7D6F88-DC5C-48AC-A1F8-51ADEBA9CF3B@vanderzwan.org> References: <8edc1a9d-bad8-4d35-8e90-b750eec84e0a@netfence.it> <b056fd28-4b48-453f-9da3-299a842ffc32@fjl.co.uk> <16810449-2952-4257-b8d4-d74e03a18ff4@netfence.it> <09543B55-0259-4CCD-B56B-49FAACFB9663@vanderzwan.org> <804e8cad-e197-4ce0-b8cf-7ee326a53a94@netfence.it> <7C87A153-C197-486B-B67E-81542D9BBDA6@vanderzwan.org> <344daf02-f1e2-4be3-9c65-834d9582197f@netfence.it> <5841211A-B05C-40FF-953E-87B7A377B7AD@vanderzwan.org> <c2e70410-ffa4-41e5-a15c-71fc2c536b5d@netfence.it> <7F88E7F0-6B24-4E5B-AEBE-BF67D623FAEF@vanderzwan.org> <dcfcca39-611c-41f6-8b6a-91b90dcf6f24@netfence.it> <B9DE59A7-89D7-489E-A94C-5EA10F00226F@vanderzwan.org> <4c460392-04d3-4d28-bf52-753a84ac188f@netfence.it> <31F76B72-CE2C-47B4-AA5C-A4BDD3C9FB03@vanderzwan.org> <6376c8ce-a83d-46ac-9d52-514f2e034f08@netfence.it> <9B7D6F88-DC5C-48AC-A1F8-51ADEBA9CF3B@vanderzwan.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] > On 22 Sep 2025, at 07:12, freebsd@vanderzwan.org wrote: > > You need zdb with 5 d’s to get the name. So 'zdb -ddddd zroot/ROOT/default 360’ Cheers Paul > >> On 21 Sep 2025, at 19:07, Andrea Venturoli <ml@netfence.it> wrote: >> >> On 9/19/25 15:28, freebsd@vanderzwan.org wrote: >> >>> Maybe procstat -af and look for a regular file with a huge value in OFFSET column. That assumes the file offset is at EOF for that huge file. >> >> Didn't help. >> >> I finally had the chance to reboot, but not even this solved!!! :( >> > > So we know it’s not a deleted but open file. That means it must have a name… > >> I still get the same figures: >>> # du -d 0 -h -x >>> 3.3G . >>> # zdb -ddd zroot/ROOT/default 0:-1:A |sort -h -b -k 5 |tail >>> 186544 2 128K 128K 31.3M 512 57.5M 100.00 ZFS plain file >>> 5738 2 128K 128K 33.2M 512 51.9M 100.00 ZFS plain file >>> 0 6 128K 16K 39.5M 512 176M 29.37 DMU dnode >>> 186545 2 128K 128K 48.4M 512 93.5M 99.60 ZFS plain file >>> 186426 2 128K 128K 53.1M 512 101M 100.00 ZFS plain file >>> 186668 3 128K 128K 76.2M 512 178M 100.00 ZFS plain file >>> 186209 3 128K 128K 91.9M 512 253M 100.00 ZFS plain file >>> 186671 3 128K 128K 135M 512 327M 100.00 ZFS plain file >>> 186427 3 128K 128K 140M 512 334M 100.00 ZFS plain file >>> 360 3 128K 128K 58.8G 512 90.0G 100.00 ZFS plain file >> >> > > Can you try ‘zdb -dddd zroot/ROOT/default 360’ ? > ( so 4 d’s ) > > If I try that on a normal file in my homedir it gives me the ’stat’ information, and even the filename. > Even if it does not give a name the owner/group and the timestamps might give a hint where to find it. > It will also give a list of the indirect blocks which will be huge but the interresting output should be at the start. > > Cheers, > Paul [-- Attachment #2 --] <html aria-label="message body"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On 22 Sep 2025, at 07:12, freebsd@vanderzwan.org wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"></div></blockquote><div><br></div>You need zdb with 5 d’s to get the name. So 'zdb -ddddd <span style="font-family: Menlo-Regular;">zroot/ROOT/default 360</span><font face="Menlo-Regular">’</font></div><div><font face="Menlo-Regular"><br></font></div><div><font face="Menlo-Regular">Cheers</font></div><div><font face="Menlo-Regular"> Paul</font></div><div><font face="Menlo-Regular"><br></font><blockquote type="cite"><div><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><blockquote type="cite" style="font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">On 21 Sep 2025, at 19:07, Andrea Venturoli <ml@netfence.it> wrote:<br><br>On 9/19/25 15:28, freebsd@vanderzwan.org wrote:<br><br><blockquote type="cite">Maybe procstat -af and look for a regular file with a huge value in OFFSET column. That assumes the file offset is at EOF for that huge file.<br></blockquote><br>Didn't help.<br><br>I finally had the chance to reboot, but not even this solved!!! :(<br><br></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">So we know it’s not a deleted but open file. That means it must have a name…</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><blockquote type="cite" style="font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">I still get the same figures:<br><blockquote type="cite"># du -d 0 -h -x<br>3.3G .<br># zdb -ddd zroot/ROOT/default 0:-1:A |sort -h -b -k 5 |tail<br> 186544 2 128K 128K 31.3M 512 57.5M 100.00 ZFS plain file<br> 5738 2 128K 128K 33.2M 512 51.9M 100.00 ZFS plain file<br> 0 6 128K 16K 39.5M 512 176M 29.37 DMU dnode<br> 186545 2 128K 128K 48.4M 512 93.5M 99.60 ZFS plain file<br> 186426 2 128K 128K 53.1M 512 101M 100.00 ZFS plain file<br> 186668 3 128K 128K 76.2M 512 178M 100.00 ZFS plain file<br> 186209 3 128K 128K 91.9M 512 253M 100.00 ZFS plain file<br> 186671 3 128K 128K 135M 512 327M 100.00 ZFS plain file<br> 186427 3 128K 128K 140M 512 334M 100.00 ZFS plain file<br> 360 3 128K 128K 58.8G 512 90.0G 100.00 ZFS plain file<br></blockquote><br><br></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Can you try ‘zdb -dddd zroot/ROOT/default 360’ ?</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">( so 4 d’s )</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">If I try that on a normal file in my homedir it gives me the ’stat’ information, and even the filename.</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Even if it does not give a name the owner/group and the timestamps might give a hint where to find it.</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">It will also give a list of the indirect blocks which will be huge but the interresting output should be at the start.</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Cheers,</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span class="Apple-tab-span" style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: pre; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"> </span><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Paul</span></div></blockquote></div><br></body></html>help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E579D721-8042-46C3-9F7B-2444580135D2>