Re: Re[2]: How to check where space is LOST
2011/9/12 Коньков Евгений kes-...@yandex.ru ** # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W clamav clamd 196823 /var 47113 -rw-r- 767747 w clamav smtp-gated 9428 wd /var 23569 drwxr-xr-x 512 r root snmpd 89483 /var 47171 -rw--- 282447082 w That is FD #3, how to find what file is that? find /var -inum 47171 -ls -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re[2]: How to check where space is LOST
Zdravstvujte, Adam. Vy pisali 12 sentyabrya 2011 g., 3:32:06: 2011/9/11 Kon'kov Evgenij [1]kes-...@yandex.ru If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M 98M891M12%/var devfs 1.0K1.0K 0B 100%/var/named/dev How to obtain what take space on /var fstat -f /var -- Adam Vande More # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root cron 20455 wd /var 47105 drwxr-x--- 512 r root cron 204553 /var 94235 -rw--- 5 w smmspsendmail 20432 wd /var 23564 drwxrwx---8192 r smmspsendmail 204324 /var 23567 -rw--- 51 w root sendmail 20418 wd /var 23561 drwxr-xr-x 512 r root sendmail 204185 /var 94226 -rw--- 80 w clamav clamd 196823 /var 47113 -rw-r- 767747 w clamav smtp-gated 9428 wd /var 23569 drwxr-xr-x 512 r root snmpd 89483 /var 47171 -rw--- 282447082 w root snmpd 89488 /var 47187 -rw-r- 728 r bind named 7738 root /var 70659 drwxr-xr-x 512 r bind named 7738 wd /var 70672 drwxr-xr-x 512 r bind named 7738 jail /var 70659 drwxr-xr-x 512 r root mpd537614 /var 94245 -rw-r--r-- 5 rw root syslogd 37423 /var 94231 -rw--- 4 w root syslogd 3742 13 /var 47122 -rw-r--r-- 182 w root syslogd 3742 14 /var 47131 -rw--- 99770 w root syslogd 3742 15 /var 47114 -rw--- 79173 w root syslogd 3742 16 /var 47136 -rw-r- 360039 w root syslogd 3742 17 /var 47134 -rw-r--r-- 56 w root syslogd 3742 18 /var 47194 -rw--- 56 w root syslogd 3742 19 /var 47127 -rw--- 90695 w root syslogd 3742 20 /var 47128 -rw--- 99531 w root syslogd 3742 21 /var 47157 -rw-r- 56 w root syslogd 3742 22 /var 47153 -rw--- 69165428 w root syslogd 3742 23 /var 47144 -rwxr-xr-x 10941641 w root devd36835 /var 94230 -rw--- 4 w That is FD #3, how to find what file is that? -- S uvazheniem, Kon'kov [2]mailto:kes-...@yandex.ru References 1. mailto:kes-...@yandex.ru 2. mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re[4]: How to check where space is LOST
Hi, Adam # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root snmpd 205453 /var 47141 -rw--- 37217152 w root snmpd 205458 /var 47159 -rw-r- 728 r root cron 20455 wd /var 47105 drwxr-x--- 512 r ... # find /var -inum 47141 -ls OutPut is empty (( 2011/9/12 Kon'kov Evgenij [1]kes-...@yandex.ru # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W clamav clamd 196823 /var 47113 -rw-r- 767747 w clamav smtp-gated 9428 wd /var 23569 drwxr-xr-x 512 r root snmpd 89483 /var 47171 -rw--- 282447082 w That is FD #3, how to find what file is that? find /var -inum 47171 -ls -- Adam Vande More -- S uvazheniem, Kon'kov [2]mailto:kes-...@yandex.ru References 1. mailto:kes-...@yandex.ru 2. mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
BUG: snmpd or How to check where space is LOST
Здравствуйте, Robert. Вы писали 12 сентября 2011 г., 10:28:22: From kes-...@yandex.ru Mon Sep 12 00:51:16 2011 Date: Mon, 12 Sep 2011 08:51:27 +0300 From: =?windows-1251?B?yu7t/Oru4iDF4uPl7ejp?= kes-...@yandex.ru To: Robert Bonomi bon...@mail.r-bonomi.com Subject: Re[2]: How to check where space is LOST Caoaanoaoeoa, Robert. u ienaee 12 naioyaoy 2011 a., 4:33:25: From owner-freebsd-questi...@freebsd.org Sun Sep 11 17:23:57 2011 Date: Mon, 12 Sep 2011 01:23:32 +0300 From: =?windows-1251?B?yu7t/Oru4iDF4uPl7ejp?= kes-...@yandex.ru To: freebsd-questions@freebsd.org Subject: How to check where space is LOST Hi. I notice that some times /var is overfull # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1d989M349M561M38%/var # cd /var/ # du -h -d 1 98M. If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1d989M 98M891M12%/var How to obtain what take space on /var RB Probably, you *don't*. grin RB df _is_ telling the truth. RB 'du' is, arguably, 'telling lies'. RB The difference concerns files that have been deleted (rm) _after_ RB they have been opened, and not yet closed. The file handle/descriptor RB that has the file open silll has access to all the data in the file. RB but *NOTHING*ELSE* -- inlcuding 'du' -- can access that file, so the RB space occupied by that deletedd file is not counted. RB Note: this *IS* a FAQ. thank you very much. fstat -f /var tell me that process snmpd with file descriptor 3 take spece: RB It's not unreasonable that snmpd (the 'simple network management protocol' RB daemon) needs a *lot* of private storage. RB In short, don't worry about it. Ok, How you can explain this: # df -h /dev/ad1s1d989M138M772M15%/var # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root snmpd 205453 /var 47141 -rw--- 37217152 w root snmpd 205458 /var 47159 -rw-r- 728 r snmpd has 35MB of space # find /var -inum 47141 -ls output is empty (( # /usr/local/etc/rc.d/snmpd restart Stopping snmpd. Starting snmpd. # df -h /dev/ad1s1d989M102M808M11%/var # fstat -f /var/ USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root snmpd 407663 /var 47171 -rw--- 23311 w root snmpd 407668 /var 47159 -rw-r- 728 r after 3-4 weeks and snmpd overfull /var filesystem Test on other system: # df -h /dev/ad0s1d6.7G2.1G4.1G34%/var # fstat -f /var | grep snmp root snmpd 71403 -588866 -rw-r--r-- 947424261 w root snmpd 71408 /var 588842 -rw-r- 728 r # /usr/local/etc/rc.d/snmpd restart Stopping snmpd. Waiting for PIDS: 7140. Starting snmpd. # fstat -f /var | grep snmp root snmpd 233763 /var 588894 -rw-r--r-- 132 w root snmpd 233768 /var 588872 -rw-r- 728 r # df -h /dev/ad0s1d6.7G1.2G 5G19%/var It seems that that is the BUG of snmpd # snmpd -v NET-SNMP version: 5.5 Web: http://www.net-snmp.org/ Email: net-snmp-cod...@lists.sourceforge.net # uname -a FreeBSD flux 9.0-CURRENT FreeBSD 9.0-CURRENT #4: Fri Jun 10 01:30:12 UTC 2011 adm@:/usr/obj/usr/src/sys/PAE_KES i386 -- С уважением, Коньков mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Re[4]: How to check where space is LOST
2011/9/12 Коньков Евгений kes-...@yandex.ru # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root snmpd 205453 /var 47141 -rw--- 37217152 w root snmpd 205458 /var 47159 -rw-r- 728 r root cron 20455 wd /var 47105 drwxr-x--- 512 r ... # find /var -inum 47141 -ls You find the inode number with fstat then use find to translate it to a filename. It works fine here, if it doesn't work for you perhaps you have a user error or there is some other sort of bug. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Re[4]: How to check where space is LOST
2011/9/12 Adam Vande More amvandem...@gmail.com 2011/9/12 Коньков Евгений kes-...@yandex.ru # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W root snmpd 205453 /var 47141 -rw--- 37217152 w root snmpd 205458 /var 47159 -rw-r- 728 r root cron 20455 wd /var 47105 drwxr-x--- 512 r ... # find /var -inum 47141 -ls You find the inode number with fstat(1) then use find(1) to translate it to a filename. It works fine here, if it doesn't work for you perhaps you have a user error or there is some other sort of bug. One other thing, it's possible the inode is gone by the time you have run find(1) so be sure you are working with current fstat(1) output. May be easier to script the transform if this is something you are doing regularly. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
How to check where space is LOST
Hi. I notice that some times /var is overfull # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M349M561M38%/var devfs 1.0K1.0K 0B 100%/var/named/dev # cd /var/ # du -h -d 1 2.0K./.snap 2.0K./account 6.0K./at 2.0K./audit 12K./backups 4.0K./crash 4.0K./cron 2.0K./empty 2.0K./heimdal 79M./log 19M./mail 4.0K./msgs 159K./named 2.0K./preserve 60K./run 2.0K./rwho 70K./spool 14K./tmp 24K./yp 2.0K./games 2.0K./agentx 22K./net-snmp 4.0K./lost+found 98M. If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M 98M891M12%/var devfs 1.0K1.0K 0B 100%/var/named/dev How to obtain what take space on /var -- С уважением, Коньков mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to check where space is LOST
2011/9/11 Коньков Евгений kes-...@yandex.ru: Hi. I notice that some times /var is overfull # df -h Filesystem Size Used Avail Capacity Mounted on /dev/ad1s1a 496M 239M 217M 52% / devfs 1.0K 1.0K 0B 100% /dev /dev/ad1s1e 124M 40K 114M 0% /tmp /dev/ad1s1f 1.8G 1.1G 596M 65% /usr /dev/ad1s1d 989M 349M 561M 38% /var devfs 1.0K 1.0K 0B 100% /var/named/dev # cd /var/ # du -h -d 1 2.0K ./.snap 2.0K ./account 6.0K ./at 2.0K ./audit 12K ./backups 4.0K ./crash 4.0K ./cron 2.0K ./empty 2.0K ./heimdal 79M ./log 19M ./mail 4.0K ./msgs 159K ./named 2.0K ./preserve 60K ./run 2.0K ./rwho 70K ./spool 14K ./tmp 24K ./yp 2.0K ./games 2.0K ./agentx 22K ./net-snmp 4.0K ./lost+found 98M . If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem Size Used Avail Capacity Mounted on /dev/ad1s1a 496M 239M 217M 52% / devfs 1.0K 1.0K 0B 100% /dev /dev/ad1s1e 124M 40K 114M 0% /tmp /dev/ad1s1f 1.8G 1.1G 596M 65% /usr /dev/ad1s1d 989M 98M 891M 12% /var devfs 1.0K 1.0K 0B 100% /var/named/dev How to obtain what take space on /var You probably have a process that is holding a file open that has been rotated or deleted. Probably a log file. sysutils/lsof can help. Also, once you track down which process is holding open files, you should try to find out why (/etc/syslog.conf is a suspect, obviously). -- -- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to check where space is LOST
On Mon, 12 Sep 2011 01:23:32 +0300 Коньков Евгений kes-...@yandex.ru wrote: Hi. I notice that some times /var is overfull # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M349M561M38%/var devfs 1.0K1.0K 0B 100%/var/named/dev # cd /var/ # du -h -d 1 2.0K./.snap 2.0K./account 6.0K./at 2.0K./audit 12K./backups 4.0K./crash 4.0K./cron 2.0K./empty 2.0K./heimdal 79M./log 19M./mail 4.0K./msgs 159K./named 2.0K./preserve 60K./run 2.0K./rwho 70K./spool 14K./tmp 24K./yp 2.0K./games 2.0K./agentx 22K./net-snmp 4.0K./lost+found 98M. If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M 98M891M12%/var devfs 1.0K1.0K 0B 100%/var/named/dev How to obtain what take space on /var -- С уважением, Коньков mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org http://www.freebsddiary.org/file-system-full.php It really depends IMHO what you use your computer for (server ore workstation...). I'd bet on /var/tmp somehow . -- Rares Aioanei ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to check where space is LOST
2011/9/11 Коньков Евгений kes-...@yandex.ru If I just #reboot system. I get that on /var is only 98M used. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a496M239M217M52%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e124M 40K114M 0%/tmp /dev/ad1s1f1.8G1.1G596M65%/usr /dev/ad1s1d989M 98M891M12%/var devfs 1.0K1.0K 0B 100%/var/named/dev How to obtain what take space on /var fstat -f /var -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
