2008/11/30 Dio, James <[EMAIL PROTECTED]>: >> Hi all, >> i noticed a strange behaviour on my macine recently. >> Something is continuously filling up my root partition at a speed near >> 1k per minute. >> I have just few programs running and none of them should save that >> much information on the disk. >> Now the problem is that i have absolutely no idea of where to start to >> investigate. > > I would consider checking if something is logging a lot, I have had some > programs far too verbose with its logs filling up /var/log > > du -h /var/log > >> Anyone have ever got a similar problem? >> Thanks to all, >> Davide > >
this was the right direction. i found a 13Gb /var/log/messages , really too big! The cause seems to be network related, probably fault of networkmanager or wicd as the file is full of: Nov 30 03:31:52 spaventapasseri TKIP decrypt: iv16=47b7 iv32=00000005 Nov 30 03:31:52 spaventapasseri TKIP decrypt: Phase2 rc4key=47 67 b7 06 7b 87 14 96 0a ad 0a 14 af 0f 42 d5 Nov 30 03:31:53 spaventapasseri TKIP decrypt: data(len=56) 47 67 b8 60 05 00 00 00 a0 00 b5 3e f2 54 a3 34 11 d6 e4 db 1e 39 e5 c7 ad e3 16 fb 57 c9 3d d9 ca 8e da 49 db 8b b7 a0 e0 73 88 bc 6b e9 f2 d9 10 0f 26 01 b9 ab 3f 9c Nov 30 03:31:53 spaventapasseri TKIP decrypt: iv16=47b8 iv32=00000005 Nov 30 03:31:53 spaventapasseri TKIP decrypt: Phase2 rc4key=47 67 b8 b5 2a 86 55 18 4d d4 c1 68 9c 7a 25 28 Nov 30 03:31:53 spaventapasseri TKIP decrypt: data(len=56) 47 67 b9 60 05 00 00 00 b1 43 0b 44 12 f8 a3 1a 4f e7 fe a2 8a 5b d9 05 32 80 ee 71 70 cc 88 63 06 70 9b b3 85 81 e2 09 36 4d 06 85 b7 24 30 a1 86 78 5a 3f 3a 31 c0 b7 Nov 30 03:31:53 spaventapasseri TKIP decrypt: iv16=47b9 iv32=00000005 Nov 30 03:31:53 spaventapasseri TKIP decrypt: Phase2 rc4key=47 67 b9 fb 58 3c 31 d3 83 9c 0a 69 a8 d8 b9 7e Nov 30 03:31:53 spaventapasseri TKIP decrypt: data(len=56) 47 67 ba 60 05 00 00 00 00 88 96 27 61 0d ce 48 c9 32 94 45 6a 1f d9 8c ba 57 64 37 2f 12 1e 3f 34 36 c9 f9 d2 ae a7 0b a5 a8 01 8d 4e 1a ef 2d 43 21 10 6f 04 f1 f1 6e Nov 30 03:31:53 spaventapasseri TKIP decrypt: iv16=47ba iv32=00000005 Nov 30 03:31:53 spaventapasseri TKIP decrypt: Phase2 rc4key=47 67 ba 71 d8 2c 38 80 14 ae ae bc 21 10 ad 7b So tomorrow i'll try to find out wich one is guilty and try find a remedy... (now it's 3 am, i'm a bit tired...) i'll post back. Thank you all for the quick help! Davide