Ted Unangst wrote:
On 11/8/05, Daniel Hamlin <[EMAIL PROTECTED]> wrote:
I'm trying to track down why /var is full, and df and du report major
differences (or else I'm reading something wrong, in which case I submit
to the verbal beatings). Pay attention to what it says for /var.
Running OpenBSD 3.8 GENERIC as a firewall. Why does df report 8G used,
and du report 9M used? What am I missing? (Don't comment on the size of
unlinked (deleted) files can still be held open by a running process.
fstat may help you find it.
fstat showed that pflogd still had a log file open. I did a pkill
pflogd (since my pf rules do not include logging now), which released
the "too-big-for-the-filesystem" log file, thus freeing the space.
Thanks for the response!
For the archives:
# fstat -f /var
USER CMD PID FD MOUNT INUM MODE R/W DV|SZ
root fstat 11854 6 /var 391555 -rw-r--r-- r 659456
_pflogd pflogd 23752 root /var 968576 drwxr-xr-x r 512
_pflogd pflogd 23752 wd /var 968576 drwxr-xr-x r 512
_pflogd pflogd 23752 4 /var 721282 -rw------- rw 21152615
root sendmail 27806 wd /var 144263 drwx------ r 512
root sendmail 27806 8 /var 453377 -rw------- w 70
root cron 27288 wd /var 41216 dr-xr-xr-x r 512
root cron 27288 3 /var 453391 -rw-r--r-- rw 6
_ntp ntpd 15607 root /var 968576 drwxr-xr-x r 512
_ntp ntpd 15607 wd /var 968576 drwxr-xr-x r 512
_pflogd pflogd 13759 root /var 968576 drwxr-xr-x r 512
_pflogd pflogd 13759 wd /var 968576 drwxr-xr-x r 512
_pflogd pflogd 13759 4 /var 721292 -rw------- rw 8279529034
_syslogd syslogd 19086 root /var 968576 drwxr-xr-x r 512
_syslogd syslogd 19086 wd /var 968576 drwxr-xr-x r 512
_syslogd syslogd 19086 8 /var 721291 -rw-r--r-- w 529
_syslogd syslogd 19086 9 /var 721288 -rw-r----- w 278
_syslogd syslogd 19086 11 /var 721307 -rw------- w 0
_syslogd syslogd 19086 12 /var 41222 -rw------- w 655
_syslogd syslogd 19086 13 /var 721312 -rw-r----- w 23114
_syslogd syslogd 19086 14 /var 721310 -rw-r----- w 0
_syslogd syslogd 19086 15 /var 721304 -rw-r----- w 0
_syslogd syslogd 19086 16 /var 721287 -rw------- w 7302
