Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 7 replies
  • Subscribers 0 subscribers
  • Views 4394 views
  • Users 0 members are here
Options
Suggested

[8.200][BUG][FIXED] Data Disk is filling up -

MrBlankOne
I started receiving email saying "Data Disk is filling up - please check. Current usage: 97%" so I started digging around

Looks like /var/storage is filling up... 

firewall-1:/var/storage # df -h

Filesystem            Size  Used Avail Use% Mounted on

/dev/sda6             5.3G  1.8G  3.4G  34% /

tmpfs                1001M   72K 1001M   1% /dev

tmpfs                1001M     0 1001M   0% /dev/shm

/dev/sda1             342M   19M  306M   6% /boot

/dev/sda5              27G   18G  6.8G  73% /var/storage

/dev/sda7              35G  322M   33G   1% /var/log

/dev/sda8             1.8G   35M  1.7G   3% /tmp

tmpfs                1001M   20K 1001M   1% /var/storage/chroot-smtp/tmp/ram





firewall-1:/var/storage # du -hs *

16K     agent

3.9M    chroot-ftp

18G     chroot-http

17M     chroot-pop3

30M     chroot-reverseproxy

34M     chroot-smtp

391M    cores

16K     lost+found

66M     pgsql




firewall-1:/var/storage/chroot-http # du -hs *

4.0K    dev

332K    etc

2.8M    lib

0       proc

18G     tmp

69M     usr

166M    var




firewall-1:/var/storage/chroot-http/tmp # ls -hl

total 18G

drwx------ 2 httpproxy httpproxy 4.0K 2011-07-28 13:15 certs

-rw------- 1 httpproxy httpproxy 5.3G 2011-07-30 00:54 tmp_21Al2w

-rw------- 1 httpproxy httpproxy   82 2011-07-28 22:22 tmp_dNKrsr

-rw------- 1 httpproxy httpproxy   83 2011-07-28 22:44 tmp_F2KPnu

-rw------- 1 httpproxy httpproxy  425 2011-07-29 22:11 tmp_jRd3Jw

-rw------- 1 httpproxy httpproxy  17M 2011-07-29 22:12 tmp_K9Jozt

-rw------- 1 httpproxy httpproxy  394 2011-07-29 18:40 tmp_m6PHnf

-rw------- 1 httpproxy httpproxy  394 2011-07-29 18:51 tmp_QYALQB

-rw------- 1 httpproxy httpproxy  17M 2011-07-29 18:41 tmp_Wk6neO

-rw------- 1 httpproxy httpproxy  17M 2011-07-29 18:51 tmp_Wrnths

-rw------- 1 httpproxy httpproxy  12G 2011-07-30 00:54 tmp_WSdTX4


Those are some BIG temp files in there! I'm assuming these file sizes are not normal.
Parents Reply Children
  • 0 in reply to Scott_Klassen
    I left the system alone over night and it seems to have cleaned itself up.


    firewall-1:/var/storage/chroot-http/tmp # df -h
    Filesystem            Size  Used Avail Use% Mounted on
    /dev/sda6             5.3G  1.8G  3.4G  34% /
    tmpfs                1001M   72K 1001M   1% /dev
    tmpfs                1001M     0 1001M   0% /dev/shm
    /dev/sda1             342M   19M  306M   6% /boot
    /dev/sda5              27G  1.1G   24G   5% /var/storage
    /dev/sda7              35G  333M   33G   2% /var/log
    /dev/sda8             1.8G   35M  1.7G   3% /tmp
    tmpfs                1001M   20K 1001M   1% /var/storage/chroot-smtp/tmp/ram



    firewall-1:/var/storage/chroot-http/tmp # ls -lh
    total 50M
    drwx------ 2 httpproxy httpproxy 4.0K 2011-07-28 13:15 certs
    -rw------- 1 httpproxy httpproxy  425 2011-07-29 22:11 tmp_jRd3Jw
    -rw------- 1 httpproxy httpproxy  17M 2011-07-29 22:12 tmp_K9Jozt
    -rw------- 1 httpproxy httpproxy  394 2011-07-29 18:40 tmp_m6PHnf
    -rw------- 1 httpproxy httpproxy  394 2011-07-29 18:51 tmp_QYALQB
    -rw------- 1 httpproxy httpproxy  17M 2011-07-29 18:41 tmp_Wk6neO
    -rw------- 1 httpproxy httpproxy  17M 2011-07-29 18:51 tmp_Wrnths


    I'll keep an eye open and see what happens.
  • 0 in reply to MrBlankOne
    The partition decided to fill up again while I was out today. So I started playing a bit and thought I'd write up my thoughts. 

    I have the same core dumps as before, so that doesn't seem to be the big issue. The temp files in /var/storage/chroot-http/tmp/ have changed and two are very large.

    Disabling web filtering removed the largest temp file and re-enabling removed the rest of the temp files that were left behind. Pretty quick and easy way to clean it up.
Unfiltered HTML