Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 24 replies
  • Subscribers 7 subscribers
  • Views 73890 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Data Disk Filling Up Very Fast

AChu87

My SG320 seems to have an issue with its data disk being filled up to 95% every two or three days. It will keep sending me email notifications to check it. I've gone through an RMA already as Sophos Tech couldn't figure out the problem thinking it was hardware related.  Only solution I have is to clear web cache. 

Have you guys had this issue?



This thread was automatically locked due to age.
Parents
  • 0

    This is where the fill up is happening. This is only a portion of whats in there.

    firewall:/var/storage/chroot-http/var/tmp # ll -th
    total 16G
    -rw------- 1 httpproxy httpproxy 382K May 5 13:00 tmp_egXBDa
    -rw------- 1 httpproxy httpproxy 8.6M May 5 13:00 tmp_hh95Jn
    -rw------- 1 httpproxy httpproxy 12M May 5 13:00 tmp_yb1m6H
    -rw------- 1 httpproxy httpproxy 12M May 5 13:00 tmp_Jkcb5g
    -rw------- 1 httpproxy httpproxy 12M May 5 13:00 tmp_0ictWv
    -rw------- 1 httpproxy httpproxy 12M May 5 13:00 tmp_a4JPfq
    -rw------- 1 httpproxy httpproxy 12M May 5 12:59 tmp_5ZrOPd
    -rw------- 1 httpproxy httpproxy 12M May 5 12:59 tmp_0K4CBu
    -rw------- 1 httpproxy httpproxy 12M May 5 12:59 tmp_AogmMQ
    -rw------- 1 httpproxy httpproxy 12M May 5 12:59 tmp_8FZB4f
    -rw------- 1 httpproxy httpproxy 12M May 5 12:59 tmp_zH8gWb
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_1lsRCE
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_D9dSkV
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_eqMddD
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_MjwJAS
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_47UAbm
    -rw------- 1 httpproxy httpproxy 12M May 5 12:58 tmp_e5zeMw
    -rw------- 1 httpproxy httpproxy 12M May 5 12:57 tmp_sdnjk2
    -rw------- 1 httpproxy httpproxy 12M May 5 12:57 tmp_Eeln6K
    -rw------- 1 httpproxy httpproxy 12M May 5 12:57 tmp_53U0RL
    -rw------- 1 httpproxy httpproxy 12M May 5 12:57 tmp_8jsMd0
    -rw------- 1 httpproxy httpproxy 12M May 5 12:57 tmp_Q6a8bX
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_QPB9ym
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_0llUws
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_aXxwIc
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_nvl4nE
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_hV6QDg
    -rw------- 1 httpproxy httpproxy 12M May 5 12:56 tmp_7QNN78
    -rw------- 1 httpproxy httpproxy 12M May 5 12:55 tmp_v7gmAC
    -rw------- 1 httpproxy httpproxy 12M May 5 12:55 tmp_AfdOM7
    -rw------- 1 httpproxy httpproxy 12M May 5 12:55 tmp_sZGyIn
    -rw------- 1 httpproxy httpproxy 12M May 5 12:55 tmp_WwWRSC
    -rw------- 1 httpproxy httpproxy 12M May 5 12:55 tmp_hnPD21
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_RSSWfK
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_DsIHgh
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_e9Ty0t
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_EMfnOg
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_h9ylny
    -rw------- 1 httpproxy httpproxy 12M May 5 12:54 tmp_X4d3zM
    -rw------- 1 httpproxy httpproxy 12M May 5 12:53 tmp_C5ItdH
    -rw------- 1 httpproxy httpproxy 12M May 5 12:53 tmp_LDYPWh
    -rw------- 1 httpproxy httpproxy 12M May 5 12:53 tmp_KesoBy
    -rw------- 1 httpproxy httpproxy 12M May 5 12:53 tmp_ym9fbv
    -rw------- 1 httpproxy httpproxy 12M May 5 12:53 tmp_GVZHx7
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_2nI4lR
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_tzqBx2
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_mNSWEG
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_Xhr3E0
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_kT2gL0
    -rw------- 1 httpproxy httpproxy 12M May 5 12:52 tmp_WAXqHG
    -rw------- 1 httpproxy httpproxy 12M May 5 12:51 tmp_eVbno2
    -rw------- 1 httpproxy httpproxy 12M May 5 12:51 tmp_8N9zc4
    -rw------- 1 httpproxy httpproxy 12M May 5 12:51 tmp_brTKZL
    -rw------- 1 httpproxy httpproxy 12M May 5 12:51 tmp_So4MJ9
    -rw------- 1 httpproxy httpproxy 12M May 5 12:51 tmp_pFO3df
    -rw------- 1 httpproxy httpproxy 12M May 5 12:50 tmp_3dlrx2
    -rw------- 1 httpproxy httpproxy 12M May 5 12:50 tmp_51DmSv
    -rw------- 1 httpproxy httpproxy 12M May 5 12:50 tmp_8UnI6E
    -rw------- 1 httpproxy httpproxy 12M May 5 12:50 tmp_5PgNWt
    -rw------- 1 httpproxy httpproxy 12M May 5 12:50 tmp_Vm6NGY
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_z5p1P9
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_rVUcq0
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_SPEUzJ
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_UsZKoW
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_ZxASRN
    -rw------- 1 httpproxy httpproxy 12M May 5 12:49 tmp_G71fBn
    -rw------- 1 httpproxy httpproxy 12M May 5 12:48 tmp_s50nWB
    -rw------- 1 httpproxy httpproxy 12M May 5 12:48 tmp_pbiW7w
    -rw------- 1 httpproxy httpproxy 12M May 5 12:48 tmp_5TvBfb
    -rw------- 1 httpproxy httpproxy 12M May 5 12:48 tmp_OpSavv
    -rw------- 1 httpproxy httpproxy 12M May 5 12:48 tmp_Jam3nv
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_jUbBUa
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_ICQzQw
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_6zTHBa
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_mdVV0R
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_tZ1crK
    -rw------- 1 httpproxy httpproxy 12M May 5 12:47 tmp_iTvn6N
    -rw------- 1 httpproxy httpproxy 12M May 5 12:46 tmp_nZ0Dtx
    -rw------- 1 httpproxy httpproxy 12M May 5 12:46 tmp_zOXYbW
    -rw------- 1 httpproxy httpproxy 12M May 5 12:46 tmp_FI78u1
    -rw------- 1 httpproxy httpproxy 12M May 5 12:46 tmp_WDkIOO
    -rw------- 1 httpproxy httpproxy 12M May 5 12:46 tmp_D66z4j
    -rw------- 1 httpproxy httpproxy 12M May 5 12:45 tmp_6sCCWu
    -rw------- 1 httpproxy httpproxy 12M May 5 12:45 tmp_0kN9Al
    -rw------- 1 httpproxy httpproxy 12M May 5 12:45 tmp_26m6wS
    -rw------- 1 httpproxy httpproxy 12M May 5 12:45 tmp_SeHLg5
    -rw------- 1 httpproxy httpproxy 12M May 5 12:45 tmp_mLud6X
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_lt25L9
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_Wt29to
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_MvfqTi
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_aOUgqg
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_2AkYow
    -rw------- 1 httpproxy httpproxy 12M May 5 12:44 tmp_Mdxyyq
    -rw------- 1 httpproxy httpproxy 12M May 5 12:43 tmp_1gaJT2
    -rw------- 1 httpproxy httpproxy 12M May 5 12:43 tmp_Otr5hk
    -rw------- 1 httpproxy httpproxy 12M May 5 12:43 tmp_JQJS5h
    -rw------- 1 httpproxy httpproxy 12M May 5 12:43 tmp_IrpJ6V
    -rw------- 1 httpproxy httpproxy 12M May 5 12:43 tmp_KggK7f

  • 0 in reply to AChu87

    Someone else here reported a similar problem recently.  The issue was a server that didn't "like" the Anti-Virus scan.  You can clear the Web Filtering cache on the 'Misc' tab of 'Filtering Options' and create an AV Exception for the server.  I bet you can see in the Web Filtering log between 12:43 and 13:00 what access was causing the problem - maybe at 13:00 when the request finally failed.  Let us know.

    Cheers - Bob

  • 0 in reply to BAlfson

    Looking through the logs I see a bunch of these.

    2016:05:05-12:16:14 firewall httpproxy[3786]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.0.0.160" dstip="" user="" ad_domain=" "statuscode="502" cached="0" profile="REF_LPUGCUCIqG (All Students)" filteraction="REF_qdyKXyQpEv (All Students)" size="0" request="0x14837800" url="courier.push.apple.com/" referer="" error="Host not found" authtime="0" dnstime="122" cattime="0" avscantime="0" fullreqtime="230818" device="0" auth="0" ua="" exceptions="av,content,url,ssl,certcheck,certdate,mime,application,fileextension"

    and

    2016:05:05-00:12:49 firewall httpproxy[2512]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" 
    srcip="10.0.2.213" dstip="23.98.255.78" user="" ad_domain="" statuscode="500" cached="0" profile="REF_LPUGCUCIqG (All Students)" filteraction="REF_qdyKXyQpEv (All Students)"
     size="0" request="0x40c4e800" url="smcontent.blob.core.windows.net/.../QtCore"
     referer="" error="deferred download finished, timeout reached, removing" authtime="0" dnstime="48" cattime="0" avscantime="2280" fullreqtime="86403523188" device="0" auth="0" ua="Mozilla/5.0" 
    exceptions="content,url,ssl,certcheck,certdate,application,fileextension" content-type="application/octet-stream"
Reply
  • 0 in reply to BAlfson

    Looking through the logs I see a bunch of these.

    2016:05:05-12:16:14 firewall httpproxy[3786]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.0.0.160" dstip="" user="" ad_domain=" "statuscode="502" cached="0" profile="REF_LPUGCUCIqG (All Students)" filteraction="REF_qdyKXyQpEv (All Students)" size="0" request="0x14837800" url="courier.push.apple.com/" referer="" error="Host not found" authtime="0" dnstime="122" cattime="0" avscantime="0" fullreqtime="230818" device="0" auth="0" ua="" exceptions="av,content,url,ssl,certcheck,certdate,mime,application,fileextension"

    and

    2016:05:05-00:12:49 firewall httpproxy[2512]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" 
    srcip="10.0.2.213" dstip="23.98.255.78" user="" ad_domain="" statuscode="500" cached="0" profile="REF_LPUGCUCIqG (All Students)" filteraction="REF_qdyKXyQpEv (All Students)"
     size="0" request="0x40c4e800" url="smcontent.blob.core.windows.net/.../QtCore"
     referer="" error="deferred download finished, timeout reached, removing" authtime="0" dnstime="48" cattime="0" avscantime="2280" fullreqtime="86403523188" device="0" auth="0" ua="Mozilla/5.0" 
    exceptions="content,url,ssl,certcheck,certdate,application,fileextension" content-type="application/octet-stream"
Children