From owner-freebsd-questions Sun Dec 30 3:55:17 2001 Delivered-To: freebsd-questions@freebsd.org Received: from yello.shallow.net (yello.shallow.net [203.18.243.120]) by hub.freebsd.org (Postfix) with ESMTP id E138C37B417 for ; Sun, 30 Dec 2001 03:55:13 -0800 (PST) Received: by yello.shallow.net (Postfix, from userid 1001) id 209BE2BE4; Sun, 30 Dec 2001 22:55:12 +1100 (EST) Date: Sun, 30 Dec 2001 22:55:12 +1100 From: Joshua Goodall To: sothat Cc: freebsd-questions@freebsd.org Subject: Re: du and df not consistency ? Message-ID: <20011230115512.GB70217@roughtrade.net> References: <20011230030524.GA32059@bsd.ee.ntu.edu.tw> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20011230030524.GA32059@bsd.ee.ntu.edu.tw> User-Agent: Mutt/1.3.24i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Dec 30, 2001 at 11:05:24AM +0800, sothat wrote: > why the df output and du got the different result ? > ( I've sync many times :) This is typically when a process has a file open on disk that has been unlinked (rm'd). The file will continue to eat space until it is closed. Typically this is visible when syslogd has been busy. Try reloading your syslogd (kill -HUP `cat /var/run/syslog.pid`). If that fixes it, there's your answer: open but unlinked logfiles. Failing that there are three other techniques a) "nuke" ; reboot the machine b) "shotgun" ; restarting as many daemon processes as possible c) "needle in a haystack" ; use fstat and/or lsof to go through the list of open files to find unexpected writers. ... in descending order of decisiveness and brutality, and in ascending order of finesse and learning. Regards Joshua To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message