From owner-freebsd-questions@FreeBSD.ORG Thu Jan 27 09:52:29 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E283616A4CE for ; Thu, 27 Jan 2005 09:52:29 +0000 (GMT) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 389E043D5C for ; Thu, 27 Jan 2005 09:52:28 +0000 (GMT) (envelope-from nlamprecht@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so224098wra for ; Thu, 27 Jan 2005 01:52:23 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; b=E5dq0PSQfoPsZ384fYD5KmeutoWi1sFQAS9JSedOywj5eADKx36eWwaRWQRe4ePD7jGyEEHUM+nQvpK8V/nrnNoqH8Ck0pdCKi86BRJuhvQLnpwWbzJ1Y9jLAEpEXBt8mT+FjuEs6/MDomV3tPN/DaLXQ+n4GXkniJ0kUws5NXg= Received: by 10.54.33.23 with SMTP id g23mr245193wrg; Thu, 27 Jan 2005 01:52:23 -0800 (PST) Received: by 10.54.38.6 with HTTP; Thu, 27 Jan 2005 01:52:23 -0800 (PST) Message-ID: <7cbadc8705012701523be61cfd@mail.gmail.com> Date: Thu, 27 Jan 2005 11:52:23 +0200 From: Nelis Lamprecht To: FreeBSD Questions Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: mystery /var space usage X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Nelis Lamprecht List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jan 2005 09:52:30 -0000 Hi, This is not one of those "I've run out of space on /var issues" but rather "what the hell is using up the space" issue. My /var file system shows: /dev/amrd0s1e 9.8G 4.8G 4.2G 53% /var A du -h of /var shows a total of 616M data only. First thing that came to mind is some process which is holding onto data so I tried restarting various daemons - cyrus, imapd, exim, apache and still no change. I've checked with fstat and lsof to see if I can see anything suspicious but nothing out of the ordinary shows up. Baring in mind this is a production mail server with about 60 000 accounts, does anyone have any other suggestions which I might try ? I could just boot into single user mode and back out which will probably solve my problem now but for obvious reasons I would like to know what is causing the added usage of /var. I'm running 4.10 currently but plan to update that to 4.11 if I have to reboot. Thanks for your reply. Regards, Nelis