Jake Conk P=P0P?P8QP0:
Hello,
I have my /var partitioned out to be 150mb which I thought was a
enough but every 2-3 days it gets full because I end up with a pflog
file that is ridiculously large! Right now I have one that is 53.6mb
and I have gotten them larger like 100mb +!! Because of this my /var
partition fills up and other programs have problems witting logs and
stuff... Here is an example:
$ ls -lah /var/log/ | grep pflog
-rw------- 1 root wheel 98.0K Nov 30 18:02 pflog
-rw------- 1 root wheel 53.6M Nov 30 02:00 pflog.0
-rw------- 1 root wheel 1.3M Nov 30 02:00 pflog.0.gz
-rw------- 1 root wheel 2.2M Nov 30 01:00 pflog.1.gz
-rw------- 1 root wheel 1.7M Nov 30 00:00 pflog.2.gz
-rw------- 1 root wheel 1.7M Nov 29 23:00 pflog.3.gz
-rw------- 1 root wheel 7.0M Nov 29 20:25 pflog.bad.630d9931
I have to keep coming here each couple of days to check if that is
full and delete them. My question is, is this normal and I just
created my /var mount too small? I think the fact that my pflog is
that big is the actual problem, does anyone know of a way to fix this?
Thanks,
- Jake
Perhaps you want to see what's inside it? Look at your pf.conf, see what
you're logging and if you do need it to be logged. Remove anything
unnecessary, setup newsyslogd to rotate it - there are plenty of options
to solve your problem. It's all in the FAQ / man pages.
