Date: Thu, 9 Sep 2004 13:08:55 -0400 From: Bart Silverstrim <bsilver@chrononomicon.com> To: questions@freebsd.org Subject: Re: Phantom /var full messages Message-ID: <EEB300B1-0282-11D9-A45D-000D9338770A@chrononomicon.com> In-Reply-To: <20040909130333.67242dc4.wmoran@potentialtech.com> References: <44A044721750C2FA9877513F@utd49554.utdallas.edu> <20040909130333.67242dc4.wmoran@potentialtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sep 9, 2004, at 1:03 PM, Bill Moran wrote: > Paul Schmehl <pauls@utdallas.edu> wrote: <snip> > >> I suspect this is some sort of filehandle not being released issue, >> but I'm >> not sure how to track it down. I've got lsof installed, but I'm not >> an >> expert on it yet. >> >> Any hints would be welcomed. What's the best way to troubleshoot this >> problem? > > First, if you could isolate it to just snort or just MySQL. Use "lsof" and grep to figure out what file handles are still open by mysqld and/or snort. Might narrow it down for you. -Bart
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EEB300B1-0282-11D9-A45D-000D9338770A>