From owner-freebsd-questions Sat Nov 16 10:19:46 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 076C137B401 for ; Sat, 16 Nov 2002 10:19:45 -0800 (PST) Received: from home.crc.co.za (home.crc.co.za [196.36.165.34]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8F88543E3B for ; Sat, 16 Nov 2002 10:19:40 -0800 (PST) (envelope-from doron@home.crc.co.za) Received: from dman ([192.168.1.8]) by home.crc.co.za (8.11.6/8.11.6) with SMTP id gADEZQ287073; Wed, 13 Nov 2002 16:35:26 +0200 (SAST) (envelope-from doron@home.crc.co.za) Message-ID: <008b01c28b22$71cd3ce0$0801a8c0@dman> From: "Doron Shmaryahu" To: "J.M. Warenda" , References: <008c01c28af0$fe072360$4500a8c0@lucifer> Subject: Re: I'm probably overlooking something really stupid but... Date: Wed, 13 Nov 2002 16:39:15 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi., go to /var and type du -ks * it will report the size of each directory. From there you can determine where the large files are sitting. Kind Regards Doron Shmaryahu ----- Original Message ----- From: "J.M. Warenda" To: Sent: Wednesday, November 13, 2002 10:45 AM Subject: I'm probably overlooking something really stupid but... > ...sometimes you need to just ask to see if you overlooked > something obvious. > > I'm running a FreeBSD 4.4-RELEASE box as my natd gateway for my > home LAN and lately it's been reporting that /var is full ... df > reports it at 107% capacity but du doesn't reveal what's filling it up. > > I had once had apache fill /var because of some trojan trying IIS > attacks on my apache server, but I've since disabled Apache so, it's > not that! Only other things running are ftpd, telnetd, and sshd ... > plus ezbounce (so I can ident on EFNet from machines behind the > gateway), natd, and xchat under X. > > Any thoughts on what might be filling var? I ran fsck -f and that > didn't reveal anything. > > -John > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message