From owner-freebsd-stable@FreeBSD.ORG Wed Dec 14 21:53:21 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6E91716A41F for ; Wed, 14 Dec 2005 21:53:21 +0000 (GMT) (envelope-from Colin.Farley@ecarecenters.com) Received: from ranger.electric.net (ranger.electric.net [216.129.90.29]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD4FB43D58 for ; Wed, 14 Dec 2005 21:53:20 +0000 (GMT) (envelope-from Colin.Farley@ecarecenters.com) Received: from root by ranger.electric.net with emc1-ok (Exim 4.24) id 1EmeYp-0001KF-W9; Wed, 14 Dec 2005 13:53:19 -0800 Received: by emcmailer; Wed, Dec 14 2005 13:53:19 -0800 Received: from [64.4.68.42] (helo=wpg1-notesmail.ecarecenters.net) by ranger.electric.net with esmtp (Exim 4.24) id 1EmeYp-0001Ju-TG; Wed, 14 Dec 2005 13:53:19 -0800 In-Reply-To: <20051214163500.GA18296@dan.emsphone.com> To: Dan Nelson X-Mailer: Lotus Notes Release 7.0 August 18, 2005 Message-ID: From: Colin Farley Date: Wed, 14 Dec 2005 15:51:12 -0600 X-MIMETrack: Serialize by Router on PRLUSA-NOTESMAIL/COMPUBank(Release 6.5.4FP1|June 19, 2005) at 12/14/2005 03:52:16 PM MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII X-Virus-Status: Scanned by VirusSMART (s) Cc: freebsd-stable@freebsd.org Subject: Re: free space reported incorrectly X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Dec 2005 21:53:21 -0000 Thanks for the reply. I have found as suspected that apache is responsible. Since these servers are redundant using UCARP I am planning to shut down the services, unmount /var and run fsck, one at a time. I'm just not sure why I cannot see these files but hopefully fsck will make them visable or just remove them for me. I think at the same time I will make a change to my apache log rotation strategy as it appears to be causing the problems. Thanks again, Colin Dan Nelson To Colin Farley 12/14/2005 10:35 AM cc freebsd-stable@freebsd.org Subject Re: free space reported incorrectly In the last episode (Dec 14), Colin Farley said: > I'm running FreeBSD 4.10-RELEASE-p16 on a couple of production mail > relays/web servers. Today I noticed that one had a lot more space in > /var used. I figured that a log was growing and started to > investigate. After running du -h /var and seeing it come up with a > total usage much less than what df -h reports I decided to run fsck > /var. This is the output I get: > > ** /dev/da1s1f (NO WRITE) Don't trust any fsck output on a mounted filessytem. You probably have some logfiles that got manually rotated or deleted (i.e. not via newsyslog), and syslogd was never told to close&reopen the logfile. Run "lsof +L1" (lsof is in ports) to find the offending processes and restart them. -- Dan Nelson dnelson@allantgroup.com