From owner-freebsd-questions Thu Jun 4 09:24:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA07974 for freebsd-questions-outgoing; Thu, 4 Jun 1998 09:24:11 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from lucy.bedford.net (lucy.bedford.net [206.99.145.54]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA07849 for ; Thu, 4 Jun 1998 09:23:51 -0700 (PDT) (envelope-from listread@lucy.bedford.net) Received: (from listread@localhost) by lucy.bedford.net (8.8.8/8.8.8) id MAA10956; Thu, 4 Jun 1998 12:16:36 -0400 (EDT) (envelope-from listread) Message-Id: <199806041616.MAA10956@lucy.bedford.net> Subject: Re: /var fills up every night? In-Reply-To: from Tim Gustafson at "Jun 4, 98 09:26:46 am" To: guff@esther.falconsoft.com Date: Thu, 4 Jun 1998 12:16:35 -0400 (EDT) Cc: freebsd-questions@FreeBSD.ORG X-no-archive: yes Reply-to: djv@bedford.net From: CyberPeasant X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Tim Gustafson wrote: > hello > > i have several FreeBSD machines, all of which run great, except for one > that every night, the /var file system fills up to 108%. by the time I > get there the next day to see what's filling it up, it's down to like 9%. > could this be a temporary file or something that's gumming up the works? > These are the little var-elves cobbling together the bits for the next day's work. Remember to set out milk and cookies from time to time, and a wee cup of espresso coffee for Hacky, their chief programmer. If you'd like to catch them in the act, edit the /etc/daily script. Around line 115 there are lines like: echo "Checking subsystem status:" echo "" echo "disks:" df -k -t local echo "" Adding a line like du -k -a /var >/home/elves will show you a list of all files and their sizes. ls -laR /var >/home/elves will show more. Note how I move it away from the email message, and onto another file system. There's some other instrumentation you could slip in there to find out which process is writing, who owns, etc etc. My guess is it's a big email in /var/mail or /var/spool/mqueue. Dave -- DISCLAIMER: If it can be disclaimed, it is. DISCLAIMER: In particular, I don't represent any organization. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message