/var partition keeps filling up after upgrading to 2.7.0-RELEASE from 2.6.0-RELEASE
-
My /var slice keeps filling up quickly (less than 24hours) and soon after filling up I end up losing functionality of my router.
How can I find out what is filling up this partition? -
After checking a bit I see /var/db as being the culprit. What is being saved here?
-
Stuff like this:
[23.09-RC][admin@Router-7]/root: find /var/db/ -type d -ls | sort -n -r 1185 1 drwxr-xr-x 2 nobody nobody 2 Nov 3 14:45 /var/db/ntopng/rrd 1025 1 drwxr-xr-x 2 root wheel 3 Nov 3 14:42 /var/db/vnstat 995 1 drwxr-xr-x 3 nobody nobody 3 Oct 29 15:49 /var/db/ntopng 994 49 drwxr-xr-x 2 root wheel 5 Oct 29 15:49 /var/db/fontconfig 416 1 drwxr-xr-x 2 root wheel 2 Oct 13 17:30 /var/db/pfblockerng/ET 271 17 drwxr-xr-x 2 root wheel 5 Oct 13 17:36 /var/db/pfblockerng/dnsblalias 270 1 drwxr-xr-x 2 root wheel 5 Nov 3 00:30 /var/db/pfblockerng/dnsblorig 268 1 drwxr-xr-x 2 root wheel 2 Oct 13 17:19 /var/db/pfblockerng/permit 267 1 drwxr-xr-x 2 root wheel 2 Oct 13 17:19 /var/db/pfblockerng/match 266 17 drwxr-xr-x 2 root wheel 13 Nov 3 12:30 /var/db/pfblockerng/deny 265 1 drwxr-xr-x 2 root wheel 2 Oct 13 17:19 /var/db/pfblockerng/native 264 17 drwxr-xr-x 2 root wheel 13 Nov 3 12:30 /var/db/pfblockerng/original 263 17 drwxr-xr-x 11 root wheel 15 Nov 3 12:30 /var/db/pfblockerng 260 1 drwxr-xr-x 2 root wheel 5 Nov 2 00:30 /var/db/pfblockerng/dnsbl 142 1 drwxr-x--- 2 _dhcp _dhcp 2 Oct 6 05:43 /var/db/dhcpcd 138 1 drwxr-xr-x 2 root wheel 2 Oct 27 04:02 /var/db/zfsd/cases 137 1 drwx------ 2 operator operator 2 Oct 27 04:02 /var/db/entropy 136 1 drwxr-xr-x 2 root wheel 2 Oct 22 11:51 /var/db/kea 135 1 drwxr-xr-x 2 root wheel 2 Oct 27 04:02 /var/db/mtree 134 1 drwx------ 2 root wheel 2 Oct 27 04:02 /var/db/freebsd-update 133 1 drwxr-xr-x 2 root wheel 2 Oct 27 04:02 /var/db/ports 132 1 drwxr-xr-x 2 ntpd ntpd 2 Oct 27 04:02 /var/db/ntp 131 1 drwxr-xr-x 3 root wheel 3 Oct 27 04:02 /var/db/zfsd 130 1 drwx------ 2 root wheel 2 Oct 27 04:02 /var/db/hyperv 129 1 drwxr-xr-x 2 root wheel 2 Oct 27 04:02 /var/db/portsnap 128 1 drwx------ 2 root wheel 2 Oct 27 04:02 /var/db/ipf 34 17 drwxr-xr-x 20 root wheel 38 Nov 3 12:01 /var/db/ 34 17 drwxr-xr-x 2 root wheel 9 Nov 3 07:53 /var/db/pkg 7 1 drwxr-xr-x 2 root wheel 4 Oct 13 17:30 /var/db/aliastables 3 17 drwxr-xr-x 2 nobody wheel 23 Oct 13 15:57 /var/db/rrd [23.09-RC][admin@Router-7]/root:It can get a bit bloated and for old uninstalled packages to leave their db's behind.
I just happen to have been doing some tidying-up in this directory today.
️ -
@RobbieTT Thanks for the example, I had a look last night and found out ntopng was writing something there and filling it up. I had to reboot the system periodically to clear the filesystem. I've uninstalled the package and will reinstall it after a few days of making sure all is running well now.
-
ntopng is one of the greedy ones that tends to leave lots of db junk behind when it is uninstalled. I had to
rmandrmdirto genuinely recover the hoarded space.Glad it helped though and I learned some stuff too.
️ -
I would only expect to see that if you're running ramdisks so /var is very limited. Is that the case here?
If so there are some packages that really don't work well with ramdisks for that reason. Including ntop-ng.
-
I've never run a RAM disk on either of my machines - I don't see a need for one either.
️ -
Sorry that was aimed @Link01. The symptoms they are seeing are common when ramdisks are in use.
