I'm looking into this question because "iostat -p ALL" reports that 30% of the dasd blks written for the server are being written to the root partition; I'm not expecting so much write activity to the root partition. Especially with /var /tmp /opt /home on separate filesystems.
Maybe iostat is misleading me? Kernel is SLES 9 2.6.5-7.191-s390 My ls -al / output tells me /tmp was updated today and not much else changed on the root partition since booting on Aug 4 around 22:14 drwxr-xr-x 2 root root 4096 Jan 10 2006 bin drwxr-xr-x 3 root root 4096 Jan 10 2006 boot drwxr-xr-x 14 root root 77824 Aug 4 22:15 dev drwxr-xr-x 64 root root 4096 Aug 9 03:03 etc drwxr-xr-x 5 root root 4096 May 4 12:10 home drwxr-xr-x 11 root root 4096 Jan 10 2006 lib drwx------ 2 root root 4096 Apr 21 21:42 lost+found drwxr-xr-- 2 root root 4096 Jan 10 2006 mnt drwxr-xr-x 3 root root 4096 Feb 2 2006 oft drwxr-xr-x 7 root root 4096 Jun 9 2005 opt dr-xr-xr-x 116 root root 0 Aug 4 22:14 proc drwx------ 12 root root 4096 Mar 16 10:48 root drwxr-xr-x 3 root root 8192 Feb 21 10:10 sbin drwxr-xr-x 4 root root 4096 May 2 2005 srv drwxr-xr-x 7 root root 0 Aug 4 22:14 sys drwxrwxrwt 32 root root 4096 Aug 11 12:16 tmp drwxr-xr-x 14 root root 4096 Jan 10 2006 usr drwxr-xr-x 15 root root 4096 Jun 9 2005 var iostat -p ALL (this reports totals since boot time; 6 days ago) Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn dasda 0.27 0.29 6.87 161760 3863424 dasda1 0.88 0.28 6.87 160120 3863416 dasda2 0.00 0.00 0.00 1568 0 dasdb 0.14 0.34 1.35 193224 756528 dasdb1 0.19 0.34 1.35 193152 756528 dasdc 0.85 1.49 11.35 835696 6379616 dasdc1 1.54 1.49 11.35 835624 6379616 My calc says dasda1 (my root partition) did about 30% of the server's Blk_wrtn; Given my setup I can't figure out where all that write I/O is too or for/ -------------------------------------------------------- This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. -----Original Message----- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Edmund R. MacKenty Sent: Friday, August 11, 2006 12:35 PM To: [email protected] Subject: Re: How to find what's been writing to a partition? On Friday 11 August 2006 12:28, Romanowski, John (OFT) wrote: >Anyone know why the /tmp directory's time-stamp changes so frequently >and is only a few minutes old? /tmp is another file system on the >server. >drwxrwxrwt 32 root root 4096 Aug 11 12:16 tmp Because every time a file is created or removed from /tmp, its timestamp gets updated to indicate that the directory has been modified. The fact that a directory's modification time has changed tells you that the write activity you are trying to track down is occurring in those directories. - MacK. ----- Edmund R. MacKenty Software Architect Rocket Software, Inc. Newton, MA USA ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
