From owner-freebsd-security Tue Nov 3 07:25:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA21327 for freebsd-security-outgoing; Tue, 3 Nov 1998 07:25:51 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from haldjas.folklore.ee (Haldjas.folklore.ee [193.40.6.121]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA21314 for ; Tue, 3 Nov 1998 07:25:39 -0800 (PST) (envelope-from narvi@haldjas.folklore.ee) Received: from haldjas.folklore.ee (haldjas.folklore.ee [172.17.2.1] (may be forged)) by haldjas.folklore.ee (8.8.8/8.8.4) with SMTP id RAA17585; Tue, 3 Nov 1998 17:24:20 +0200 (EET) Date: Tue, 3 Nov 1998 17:24:20 +0200 (EET) From: Narvi To: Barrett Richardson cc: "Oles' Hnatkevych" , Jay Nelson , security@FreeBSD.ORG Subject: Re: hidden files question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 3 Nov 1998, Barrett Richardson wrote: > > > On Tue, 3 Nov 1998, Oles' Hnatkevych wrote: > > > On Mon, 2 Nov 1998, Jay Nelson wrote: > > > > > Any combination I've used with find hasn't shown anything. Any ideas > > > on how I can find the missing 45MB? > > > > > > > I would do 'cd /var; du -k -d 1'. > > > > Yeah, and if there is a big discrepancy between between df and du you > might could (as a drastic measure) shut the machine off, run fsck > on /var, and see if said unaccounted for usage appears in lost+found. > > You may be able to accomplish the same on a live file system (ask > -hackers). > And one could use du -a to see whetever there were no files that ls was told not to show... Sander There is no love, no good, no happiness and no future - all these are just illusions. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message