From owner-freebsd-questions@FreeBSD.ORG Fri Feb 6 19:27:37 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AFD601065677 for ; Fri, 6 Feb 2009 19:27:37 +0000 (UTC) (envelope-from freebsd@superhero.nl) Received: from superhero.nl (wolverine.superhero.nl [77.73.16.20]) by mx1.freebsd.org (Postfix) with ESMTP id 25AA88FC3A for ; Fri, 6 Feb 2009 19:27:36 +0000 (UTC) (envelope-from freebsd@superhero.nl) Received: (qmail 90420 invoked by uid 80); 6 Feb 2009 19:27:34 -0000 Received: from 82.95.198.17 (SquirrelMail authenticated user gelsemap) by webmail.superhero.nl with HTTP; Fri, 6 Feb 2009 20:27:34 +0100 (CET) Message-ID: <922bbbdc3563fcba8c8ed34d7fa6bf1f.squirrel@webmail.superhero.nl> In-Reply-To: <20090206190553.GB13084@dan.emsphone.com> References: <20090206190553.GB13084@dan.emsphone.com> Date: Fri, 6 Feb 2009 20:27:34 +0100 (CET) From: "Gelsema, P \(Patrick\) - FreeBSD" To: "Dan Nelson" User-Agent: SquirrelMail/1.4.17 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-questions@freebsd.org Subject: Re: /var grows, apache open file, which file? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Feb 2009 19:27:37 -0000 On Fri, February 6, 2009 20:05, Dan Nelson wrote: > In the last episode (Feb 06), Gelsema, P (Patrick) - FreeBSD said: >> I noticed that my var slice is getting eaten by apache. The amount of >> free >> space is getting less and less per day. So I started to investigate. >> >> I did the following; >> >> # fstat -u www | grep var | more >> www httpd 97042 9 /var 74653 -rw------- 176907484 w >> www httpd 97042 12 /var 71575 -rw------- 1345623 w >> www httpd 97042 13 /var 24693 -rw-r--r-- 0 w >> www httpd 97042 15 /var 70919 -rw------- 0 w >> www httpd 97042 16 /var 70919 -rw------- 0 w >> www httpd 26059 9 /var 74653 -rw------- 176907484 w >> www httpd 26059 12 /var 71575 -rw------- 1345623 w >> >> So I have an Inumber, lets search for that. >> >> # find / -inum 74653 >> /usr/ports/net/pptpclient/files >> >> This confuses me! That is on a different slice. > > Then that is not the inode you are looking for. Use "find -x /var ..." to doesnt return anything. > limit the search to just the /var mountpoint. Your problem is probably > due > to a bad logfile rotator that isn't signalling apache to close&reopen the > logs, so it keeps logging to a file you have deleted. If you're using > newsyslog, make sure you have listed your apache pidfile on the line > correspoinding to any apache logs so it knows which process to signal. > See > the newsyslog.conf manpage for more details. Added /var/run/httpd.pid to newsyslog.conf and restarted apache. I am also using cronolog. from httpd.conf: CustomLog "| /usr/local/sbin/cronolog /var/log/apache2/%Y/%m/%d/access.log" combined Thanks Patrick > > -- > Dan Nelson > dnelson@allantgroup.com >