Date: 09 Jun 2002 21:16:11 +0100 From: "S. Roberts" <sroberts@dsl.pipex.com> To: Mikko Tyolajarvi <mikko@dynas.se> Cc: questions@freebsd.org Subject: Re: Strange size increase in /var Message-ID: <1023653772.318.76.camel@Demon.Strobe.org> In-Reply-To: <200206091955.g59Jt2kj010659@mikko.na.rsa.net> References: <1023648827.318.73.camel@Demon.Strobe.org> <200206091955.g59Jt2kj010659@mikko.na.rsa.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-PNkXjMBT6fvjN07uwB4k Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi Mikko, Thanks for getting back to me. Based on what you've suggested, I had a look in /var/spool and found this: # pwd /var/spool/clientmqueue # du -h -d0 11M . #=20 Do you know if its possible to flush this stuff? Thanks for the info. Stacey On Sun, 2002-06-09 at 20:55, Mikko Tyolajarvi wrote: > In local.freebsd.questions you write: >=20 > >Hello, > > Over the last two days, I've noticed a significant increase in the > >size of /var on this system: > ># df -k > >Filesystem 1K-blocks Used Avail Capacity Mounted on > >/dev/ad0s1a 148823 42962 93956 31% / > >/dev/ad0s1f 11789353 1527589 9318616 14% /usr > >/dev/ad0s1e 297663 51443 222407 19% /var > >procfs 4 4 0 100% /proc > ># >=20 > >Normally /var would come in at around 13% - 14%, as was the case this > >time last week, I believe. >=20 > >Here's what du returns: > ># pwd > >/var > ># du -h -d0 > > 50M . > ># du -h -d1 > >1.0K ./account > >3.0K ./at > > 11K ./backups > >2.0K ./crash > >3.0K ./cron > > 24M ./db >=20 > I'd check this: du -k /var/db >=20 > Unless you have any applications storing data here, most of the space > is usually consumed by /var/db/pkg (depending on how many ports or > packages you have installed). >=20 > >1.0K ./heimdal > > 14M ./log > >1.0K ./mail > >2.0K ./msgs > >1.0K ./preserve > > 56K ./run > >1.0K ./rwho > > 11M ./spool >=20 > Most likely culprit. du -k /var/spool. Something may have been been > queued up (mail, printjobs). If there are users on this machine, > someone may have put something in /var/spool/uucppublic (publicly > writable, you might as well delete it unless you are actually using > uucp). >=20 > On a virgin system /var/spool is less than 100K. >=20 > >2.0K ./tmp > > 20K ./yp > > 62K ./games > >2.0K ./lib > > 50M . >=20 > I suppose a stray core file is a possibility too. >=20 > $.02, > /Mikko > --=20 > Mikko Tyolajarvi_______________________________________mikko@rsasecurity= .com > RSA Security >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message --=20 Stacey Roberts B.Sc. (HONS) Computer Science Network Systems Engineer --=-PNkXjMBT6fvjN07uwB4k Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi Mikko, Thanks for getting back to me. Based on what you've suggested, I had a look in /var/spool and found this: # pwd /var/spool/clientmqueue # du -h -d0 11M . #=20 Do you know if its possible to flush this stuff? Thanks for the info. Stacey On Sun, 2002-06-09 at 20:55, Mikko Tyolajarvi wrote: > In local.freebsd.questions you write: >=20 > >Hello, > > Over the last two days, I've noticed a significant increase in the > >size of /var on this system: > ># df -k > >Filesystem 1K-blocks Used Avail Capacity Mounted on > >/dev/ad0s1a 148823 42962 93956 31% / > >/dev/ad0s1f 11789353 1527589 9318616 14% /usr > >/dev/ad0s1e 297663 51443 222407 19% /var > >procfs 4 4 0 100% /proc > ># >=20 > >Normally /var would come in at around 13% - 14%, as was the case this > >time last week, I believe. >=20 > >Here's what du returns: > ># pwd > >/var > ># du -h -d0 > > 50M . > ># du -h -d1 > >1.0K ./account > >3.0K ./at > > 11K ./backups > >2.0K ./crash > >3.0K ./cron > > 24M ./db >=20 > I'd check this: du -k /var/db >=20 > Unless you have any applications storing data here, most of the space > is usually consumed by /var/db/pkg (depending on how many ports or > packages you have installed). >=20 > >1.0K ./heimdal > > 14M ./log > >1.0K ./mail > >2.0K ./msgs > >1.0K ./preserve > > 56K ./run > >1.0K ./rwho > > 11M ./spool >=20 > Most likely culprit. du -k /var/spool. Something may have been been > queued up (mail, printjobs). If there are users on this machine, > someone may have put something in /var/spool/uucppublic (publicly > writable, you might as well delete it unless you are actually using > uucp). >=20 > On a virgin system /var/spool is less than 100K. >=20 > >2.0K ./tmp > > 20K ./yp > > 62K ./games > >2.0K ./lib > > 50M . >=20 > I suppose a stray core file is a possibility too. >=20 > $.02, > /Mikko > --=20 > Mikko Tyolajarvi_______________________________________mikko@rsasecurity= .com > RSA Security >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message - --=20 Stacey Roberts B.Sc. (HONS) Computer Science Network Systems Engineer -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQA+AwUBPQO3ivdn4A8qiCO5EQL0lwCeKW0JTRtdbVon/Yflof6HADeamnIAl1Dy x84NwbfpMXyJPSFyCD3RNe8= =rm+G -----END PGP SIGNATURE----- --=-PNkXjMBT6fvjN07uwB4k-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1023653772.318.76.camel>