You could have a circular mail route, that keeps trying to succeed and
filling up /var/spool/mail... in general, if this is not currently a live
server, you might want to /etc/init.d/network stop to shut down network
connections while you fix this.  If all else fails, try taking the machine
into single-user mode ('init S') for bigtime safety, which is what you're
supposed to do for fscking fixit sessions AFAIK.
Also, if this system is still using apt-rpm (did I do that?!  = )  then you
can certainly clear out /var/cache/apt/archives, although you prolly already
found that... and btw, I use 'du -scm *' to get a one-level deep listing
from du, in MB with a total at the end (there are many ways to get this of
course).

Good luck, Jim!

    Ben


On Mon, 22 Dec 2003 11:44:03 -0800
Jim Beard <[EMAIL PROTECTED]> wrote:

| Howdy folks,
| 
|       I'm working on a RedHat 7.3 system and am experiencing some strange 
| behavior.  The /var partition keeps filling up.  Since logs etc, get 
| written there I'm not surprised that it might fill up fast, however.... 
|   df, tells me the partition is 2.5 gigs...  when I started addressing 
| this problem the size of /var was 1.8 gig.  I used 'du -h 
| --max-depth=1' so I so I could see the sizes of the first level of 
| directories etc...  Now, when I find some files I can delete, say old 
| log files, maybe 300 Megs worth, and remove them, it takes about 30 
| seconds for 'df' to show the space used as 100% on /var...  I've 
| watched it go 96%, *pause for 2 seconds*,  97%, * pause for 2 more 
| seconds*,  98% .. etc ...   So now I'm stuck, left with a 1.4 gig /var 
| directory, which df says is full of 2.5 gigs worth of stuff... and I 
| can't, for the life of me, figure out where this new data is being 
| written....
| 
| Any advice?
| 
| 
| Jim Beard
| counterclaim.com, Inc
| http://www.counterclaim.com
| http://openefm.sourceforge.net
| 
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to