On Nov 30, 2007 7:47 PM, NetOne - Doichin Dokov <[EMAIL PROTECTED]> wrote: > Jake Conk P=P0P?P8Q P0: > > > Hello, > > > > I have my /var partitioned out to be 150mb which I thought was a > > enough but every 2-3 days it gets full because I end up with a pflog > > file that is ridiculously large! Right now I have one that is 53.6mb > > and I have gotten them larger like 100mb +!! Because of this my /var > > partition fills up and other programs have problems witting logs and > > stuff... Here is an example: > > > > $ ls -lah /var/log/ | grep pflog > > -rw------- 1 root wheel 98.0K Nov 30 18:02 pflog > > -rw------- 1 root wheel 53.6M Nov 30 02:00 pflog.0 > > -rw------- 1 root wheel 1.3M Nov 30 02:00 pflog.0.gz > > -rw------- 1 root wheel 2.2M Nov 30 01:00 pflog.1.gz > > -rw------- 1 root wheel 1.7M Nov 30 00:00 pflog.2.gz > > -rw------- 1 root wheel 1.7M Nov 29 23:00 pflog.3.gz > > -rw------- 1 root wheel 7.0M Nov 29 20:25 pflog.bad.630d9931 > > > > I have to keep coming here each couple of days to check if that is > > full and delete them. My question is, is this normal and I just > > created my /var mount too small? I think the fact that my pflog is > > that big is the actual problem, does anyone know of a way to fix this? > > > > Thanks, > > - Jake > Perhaps you want to see what's inside it? Look at your pf.conf, see what > you're logging and if you do need it to be logged. Remove anything > unnecessary, setup newsyslogd to rotate it - there are plenty of options > to solve your problem. It's all in the FAQ / man pages. > >
Thanks guys for your replies... I'll try to cut down on the all the useless logging I'm doing but when I opened the log files up to see what was inside them I only saw all this binary stuff. I assume thats not what's supposed to be in the pflogs right? Any ideas why I'm getting binary stuff in the logs? Thanks, - Jake
