Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Disk usage ( / ) is 100%

    Off-Topic & Non-Support Discussion
    7
    24
    17.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      FroLien
      last edited by

      Dear All
      May I ask you how to solve and how to clean anything from root directory.

      We use pfSense as a VM on ESXi 6.0. We assign 5GB of amount for root. When I check in pfSense WebGUI, Disk usage ( / ) is 100% full.

      Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

      Please may i know how can i solve this issue.

      GrimsonG 1 Reply Last reply Reply Quote 0
      • GrimsonG
        Grimson Banned @FroLien
        last edited by

        @frolien said in Disk usage ( / ) is 100%:

        Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

        Act like a responsible Admin and do a fresh install with a currently supported version, then you might get support.

        1 Reply Last reply Reply Quote 1
        • S
          SteveITS Galactic Empire
          last edited by

          Check for log files? Are you running Suricata?

          https://forum.netgate.com/topic/137652/suricata-suricata-log-not-rotated
          https://forum.netgate.com/topic/140951/suricata-log-files-are-filling-the-disk
          https://forum.netgate.com/topic/130980/suricata-not-limiting-log-sizes-by-default

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          F 1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            Connect to the console. Run item 8 (Shell). Run this command and see where all the files are:

            du -Pshx /*
            
            F 1 Reply Last reply Reply Quote 2
            • RicoR
              Rico LAYER 8 Rebel Alliance
              last edited by

              1. Take a full Backup in the WebGUI
              2. Reinstall 2.4.4-p1 with some more space
              3. Online Update to 2.4.4-p2
              4. Restore your Backup

              -Rico

              F 1 Reply Last reply Reply Quote 1
              • F
                FroLien @Rico
                last edited by

                Thank you for your reply @Rico
                If i reinstall, Can I use my backup of WebGUI completely without any changed? Because I am afraid that If I restore backup of WebGUI, i want to get back my all settings all rules without any error.

                1 Reply Last reply Reply Quote 0
                • F
                  FroLien @KOM
                  last edited by

                  Than you for your reply @KOM
                  I run your command in pfSense command prompt, output was ..

                  8.0K /COPYRIGHT
                  1.1M /bin
                  58M /boot
                  0B /boot.config
                  3.1M /cf
                  0B /conf
                  12K /conf.default
                  3.0K /dev
                  7.3M /etc
                  20K /home
                  9.3M /lib
                  168K /libexec
                  4.0K /media
                  4.0K /mnt
                  4.0K /proc
                  7.6M /rescue
                  44K /root
                  4.7M /sbin
                  0B /sys
                  476K /tmp
                  601M /usr
                  4.6G /var

                  1 Reply Last reply Reply Quote 0
                  • provelsP
                    provels
                    last edited by provels

                    It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick. If so, clear this check box and reset the logs to get the space back.

                    Screenshot_1.png

                    After that, I would check your rules and see if you have some excessive logging turned on there. Maybe someone created or was testing a rule and forgot to turn logging off. Hope this helps.

                    Peder

                    MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                    BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                    GrimsonG F 3 Replies Last reply Reply Quote 1
                    • GrimsonG
                      Grimson Banned @provels
                      last edited by Grimson

                      @provels said in Disk usage ( / ) is 100%:

                      It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick.

                      pfSense uses circular logs, so unless he has increased the log file size setting considerably none of the logs from the base system will fill up the disk. This is more likely, and like @teamits suggested, a package going rampant.

                      1 Reply Last reply Reply Quote 1
                      • provelsP
                        provels
                        last edited by

                        So

                        du -Pshx /var/*
                        
                         du -Pshx /var/log/*
                        

                        to track it down.

                        Peder

                        MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                        BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                        F 1 Reply Last reply Reply Quote 0
                        • F
                          FroLien @provels
                          last edited by

                          Thank you for your reply @teamits
                          My system is not running Suricata?

                          1 Reply Last reply Reply Quote 0
                          • F
                            FroLien @provels
                            last edited by

                            @provels
                            I clear that check box and reset the logs files. But still 100%.

                            provelsP 1 Reply Last reply Reply Quote 0
                            • F
                              FroLien @provels
                              last edited by

                              @provels said in Disk usage ( / ) is 100%:

                              du -Pshx /var/log/*

                              I use above command in Command Prompt. But still 100%.

                              1 Reply Last reply Reply Quote 0
                              • provelsP
                                provels @FroLien
                                last edited by

                                @FroLien Can you post the output results?

                                Peder

                                MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                F 1 Reply Last reply Reply Quote 1
                                • F
                                  FroLien @provels
                                  last edited by

                                  Hi @provels
                                  Thank you for your quick reply. May I show you my output results.

                                  du -Pshx /var/* output

                                  du -Pshx /var/log/* output

                                  provelsP 1 Reply Last reply Reply Quote 0
                                  • F
                                    FroLien @SteveITS
                                    last edited by

                                    Dear @teamits
                                    I am not running Suricata on my system.

                                    1 Reply Last reply Reply Quote 0
                                    • provelsP
                                      provels @FroLien
                                      last edited by

                                      @FroLien Looks like it's your Squid cache (I think so anyway, I don't run Squid). I think you just need a larger disk. Can you expand it? Maybe to 20GB?
                                      9501c1ee-444d-41a6-a6fc-edb616564076-image.png

                                      Peder

                                      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                      F 2 Replies Last reply Reply Quote 0
                                      • F
                                        FroLien @provels
                                        last edited by

                                        @provels said in Disk usage ( / ) is 100%:

                                        be

                                        Can I delete logs folder from squid?

                                        provelsP 1 Reply Last reply Reply Quote 0
                                        • F
                                          FroLien @provels
                                          last edited by

                                          @provels
                                          Opps

                                          I deleted logs folder from /var/squid
                                          After I deleted it, i got over half of free space.

                                          alt text

                                          I deleted it with this command.
                                          rm -r /var/squid/logs in shell (8)

                                          1 Reply Last reply Reply Quote 0
                                          • provelsP
                                            provels @FroLien
                                            last edited by provels

                                            @FroLien It's not the logs, it's the cached info that Squid serves (images, etc, etc) so they don't have to be retrieved again from the Internet. How much disk space do you have allocated for Squid in settings?

                                            EDIT - Well OK then... :) It was the logs... I don't have Squid installed, so I don't know what the file structure is at that level. I still think I'd make your disk about 10-20GB...

                                            Peder

                                            MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                            BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                            F 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.