From owner-freebsd-questions@FreeBSD.ORG Sat Nov 3 02:42:14 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 63009761 for ; Sat, 3 Nov 2012 02:42:14 +0000 (UTC) (envelope-from ah@dreamchaser.org) Received: from nightmare.dreamchaser.org (nightmare.dreamchaser.org [12.32.44.142]) by mx1.freebsd.org (Postfix) with ESMTP id 118378FC0C for ; Sat, 3 Nov 2012 02:42:13 +0000 (UTC) Received: from breakaway.dreamchaser.org (breakaway.dreamchaser.org. [12.32.36.73]) by nightmare.dreamchaser.org (8.13.6/8.13.6) with ESMTP id qA32g5Rc083622; Fri, 2 Nov 2012 20:42:06 -0600 (MDT) (envelope-from ah@dreamchaser.org) Message-ID: <5094847D.5000904@dreamchaser.org> Date: Fri, 02 Nov 2012 20:42:05 -0600 From: Gary Aitken User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:13.0) Gecko/20120609 Thunderbird/13.0 MIME-Version: 1.0 To: Eugen Konkov Subject: Re: HELP: some process eat my /var References: <1397755241.20121102210553@yandex.ru> In-Reply-To: <1397755241.20121102210553@yandex.ru> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (nightmare.dreamchaser.org [12.32.36.65]); Fri, 02 Nov 2012 20:42:06 -0600 (MDT) Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2012 02:42:14 -0000 Looks like /var/log has most of it. If you're running X, check for a huge Xorg.0.log. I had this problem as a result of a radeon graphics card that would get into some kind of reinitialization loop. In any case, look at the files in /var/log On 11/02/12 13:05, Eugen Konkov wrote: > > how to find which process take space? > > > root@newflux:/var/log # cd /var > root@newflux:/var # > root@newflux:/var # > root@newflux:/var # > root@newflux:/var # > root@newflux:/var # > root@newflux:/var # df -h > Filesystem Size Used Avail Capacity Mounted on > /dev/ada0s1a 2G 455M 1.3G 25% / > devfs 1.0k 1.0k 0B 100% /dev > /dev/ada0s1e 3.9G 488M 3.1G 13% /tmp > /dev/ada0s1f 37G 27G 7.3G 79% /usr > /dev/ada0s1d 30G 23G 3.7G 87% /var > /dev/ada0s1g 216G 8.0k 199G 0% /backup > procfs 4.0k 4.0k 0B 100% /proc > devfs 1.0k 1.0k 0B 100% /var/named/dev > root@newflux:/var # fstat -f /var > USER CMD PID FD MOUNT INUM MODE SZ|DV R/W > root fstat 97928 wd /var 2 drwxr-xr-x 512 r > root csh 96949 wd /var 2 drwxr-xr-x 512 r > root mc 96947 wd /var 802560 drwxr-xr-x 3072 r > root csh 96124 wd /var 2 drwxr-xr-x 512 r > root snmpd 96024 7 /var 804161 -rw-r----- 728 r > root mpd5 51585 4 /var 3691792 -rw-r--r-- 6 rw > freeradi radiusd 51554 3 /var 802703 -rw-r----- 0 w > root inetd 22687 3 /var 3691804 -rw------- 5 w > root cron 22392 wd /var 3772032 drwxr-x--- 512 r > root cron 22392 3 /var 3691803 -rw------- 5 w > smmsp sendmail 22311 wd /var 1926151 drwxrwx--- 512 r > smmsp sendmail 22311 4 /var 1926203 -rw------- 51 w > root sendmail 22202 wd /var 1926147 drwxr-xr-x 512 r > root sendmail 22202 5 /var 3691802 -rw------- 80 w > bind named 7370 wd /var 401288 drwxr-xr-x 512 r > bind named 7370 root /var 401280 drwxr-xr-x 512 r > bind named 7370 jail /var 401280 drwxr-xr-x 512 r > root devd 5693 5 /var 3691824 -rw------- 4 w > quagga bgpd 4616 3 /var 3691791 -rw-r--r-- 5 rw > quagga zebra 4611 5 /var 3691788 -rw-r--r-- 5 rw > root@newflux:/var # du -h -d 1 > 4.0k ./.snap > 4.0k ./account > 12k ./at > 4.0k ./audit > 3.1M ./backups > 858M ./crash > 8.0k ./cron > 1.3G ./db > 36k ./empty > 4.0k ./heimdal > 3.7G ./log > 352M ./mail > 8.0k ./msgs > 1.6M ./named > 4.0k ./preserve > 108k ./run > 4.0k ./rwho > 608k ./spool > 236k ./tmp > 28k ./yp > 4.0k ./games > 4.0k ./agentx > 4.0k ./cache > 28k ./net-snmp > 28k ./lost+found > 212k ./monit > 6.2G . > >