From owner-freebsd-fs@FreeBSD.ORG Tue Oct 16 16:12:38 2007 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C488B16A41A for ; Tue, 16 Oct 2007 16:12:38 +0000 (UTC) (envelope-from kupfer@ldc.upenn.edu) Received: from lorax.ldc.upenn.edu (lorax.ldc.upenn.edu [158.130.16.184]) by mx1.freebsd.org (Postfix) with ESMTP id AB8BF13C465 for ; Tue, 16 Oct 2007 16:12:37 +0000 (UTC) (envelope-from kupfer@ldc.upenn.edu) Received: by lorax.ldc.upenn.edu (Postfix, from userid 33361) id CE0C5B24B2; Tue, 16 Oct 2007 11:49:13 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by lorax.ldc.upenn.edu (Postfix) with ESMTP id C4957B2492 for ; Tue, 16 Oct 2007 11:49:13 -0400 (EDT) Date: Tue, 16 Oct 2007 11:49:13 -0400 (EDT) From: Paul Kupfer To: freebsd-fs@freebsd.org Message-ID: <20071016114035.O64828@lorax.ldc.upenn.edu> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Subject: du and df discrepancy X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2007 16:12:38 -0000 I am seeing a very odd problem on a FreeBSD 6.1-PRERELEASE #0 mail server we have. We originally had a separate scsi device mounted as /var/mail (note this was underneath the mountpoint for /var). We reached a point where space on /var was running out, and running a df on that volume would show that there was only 160M out of 5.8G available (and 5.2G used). So I ran "du -hc /var" to see where I could remove some old files. du output shows the total of /var to be 311M, which is vastly different than what du tells me. I thought that this was perhaps a result of the way we had things mounted, and so I unmount the /var/mail device and remounted it as /mail, then put a symlink from /mail to /var/mail, still no dice, same results. I have not rebooted the machine yet (was hoping I wouldn't have to since it is a mail server). Is it possible that the inode tables are "out of whack" since changing these mountpoints, perhaps an fsck? Anyone ever seen anything like this before? Any help would be greatly appreciated. -Paul-