From owner-freebsd-questions@FreeBSD.ORG Fri Sep 10 15:43:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5005316A4CE for ; Fri, 10 Sep 2004 15:43:10 +0000 (GMT) Received: from mx.tele-kom.ru (mx.tele-kom.ru [213.80.148.6]) by mx1.FreeBSD.org (Postfix) with SMTP id D684843D58 for ; Fri, 10 Sep 2004 15:43:08 +0000 (GMT) (envelope-from doublef@tele-kom.ru) Received: (qmail 66105 invoked by uid 555); 10 Sep 2004 15:44:13 -0000 Received: from shark (213.80.149.161) by t-k.ru with TeleMail/2 id 1094831053-66094 for jerrymc@clunix.cl.msu.edu; Fri, 10 Sep 19:44:13 2004 +0400 (MSD) Received: by shark (Postfix, from userid 1000) id 11DBC3A0; Fri, 10 Sep 2004 19:43:02 +0400 (MSD) Date: Fri, 10 Sep 2004 19:43:00 +0400 From: Sergey Zaharchenko To: Jerry McAllister Message-ID: <20040910154300.GA4588@shark.localdomain> References: <200409101523.i8AFNCr07551@clunix.cl.msu.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ibTvN161/egqYuK8" Content-Disposition: inline In-Reply-To: <200409101523.i8AFNCr07551@clunix.cl.msu.edu> User-Agent: Mutt/1.4.2.1i X-Listening-To: /Aquarium/Ukravshiy_dozhd cc: pauls@utdallas.edu cc: shahid@zonewave.net cc: FreeBSD-questions Subject: Re: Phantom /var full messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Sep 2004 15:43:10 -0000 --ibTvN161/egqYuK8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Sep 10, 2004 at 11:23:11AM -0400, Jerry McAllister probably wrote: >=20 > No, you are running out of space! DF has nothing to do with it. >=20 > If one of the processes grabs some file space and then unlinks, it > is still holding/using that space and probably needs it, even if=20 > one method (df) shows it used and another (du) does not. Don't be=20 > fooled by the red herring of du and df disagreeing. Some process is=20 > trying to use that space and you need more of it. =20 >=20 Correct. du can only show the `named' space (the size of files which are not unlinked-but-open). One of the ways to find out what has the largest files open is # fstat | grep /var | sort -r -n -k 8 | head (gives you the `top ten list' of the largest open files and the processes which use them). If the problem is in a program holding lots of small files open, then a different script (utilizing uniq -c) could be devised. > If you are doing database stuff, then I can't imagine having a /var > of less than a few GB, unless you move a lot of stuff out of /var and > create links. See some recent previous posts on the subject. 31GB is `a few GB' in some sense. >=20 > ////jerry >=20 > >=20 > > Paul Schmehl (pauls@utdallas.edu) > > Adjunct Information Security Officer > > The University of Texas at Dallas > > AVIEN Founding Member > > http://www.utdallas.edu > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 DoubleF Madam, there's no such thing as a tough child -- if you parboil them first for seven hours, they always come out tender. -- W. C. Fields --ibTvN161/egqYuK8 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFBQcuDwo7hT/9lVdwRAv75AJ9h1ukaSxFOAf71lFQATs9uodOEZQCdG3zq DnefZguOBhyeNbJ6WuKEDwM= =zVC+ -----END PGP SIGNATURE----- --ibTvN161/egqYuK8--