Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Disk usage ( / ) is 100%

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    24 Posts 7 Posters 18.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GrimsonG
      Grimson Banned @provels
      last edited by Grimson

      @provels said in Disk usage ( / ) is 100%:

      It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick.

      pfSense uses circular logs, so unless he has increased the log file size setting considerably none of the logs from the base system will fill up the disk. This is more likely, and like @teamits suggested, a package going rampant.

      1 Reply Last reply Reply Quote 1
      • provelsP
        provels
        last edited by

        So

        du -Pshx /var/*
        
         du -Pshx /var/log/*
        

        to track it down.

        Peder

        MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
        BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

        F 1 Reply Last reply Reply Quote 0
        • F
          FroLien @provels
          last edited by

          Thank you for your reply @teamits
          My system is not running Suricata?

          1 Reply Last reply Reply Quote 0
          • F
            FroLien @provels
            last edited by

            @provels
            I clear that check box and reset the logs files. But still 100%.

            provelsP 1 Reply Last reply Reply Quote 0
            • F
              FroLien @provels
              last edited by

              @provels said in Disk usage ( / ) is 100%:

              du -Pshx /var/log/*

              I use above command in Command Prompt. But still 100%.

              1 Reply Last reply Reply Quote 0
              • provelsP
                provels @FroLien
                last edited by

                @FroLien Can you post the output results?

                Peder

                MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                F 1 Reply Last reply Reply Quote 1
                • F
                  FroLien @provels
                  last edited by

                  Hi @provels
                  Thank you for your quick reply. May I show you my output results.

                  du -Pshx /var/* output

                  du -Pshx /var/log/* output

                  provelsP 1 Reply Last reply Reply Quote 0
                  • F
                    FroLien @SteveITS
                    last edited by

                    Dear @teamits
                    I am not running Suricata on my system.

                    1 Reply Last reply Reply Quote 0
                    • provelsP
                      provels @FroLien
                      last edited by

                      @FroLien Looks like it's your Squid cache (I think so anyway, I don't run Squid). I think you just need a larger disk. Can you expand it? Maybe to 20GB?
                      9501c1ee-444d-41a6-a6fc-edb616564076-image.png

                      Peder

                      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                      F 2 Replies Last reply Reply Quote 0
                      • F
                        FroLien @provels
                        last edited by

                        @provels said in Disk usage ( / ) is 100%:

                        be

                        Can I delete logs folder from squid?

                        provelsP 1 Reply Last reply Reply Quote 0
                        • F
                          FroLien @provels
                          last edited by

                          @provels
                          Opps

                          I deleted logs folder from /var/squid
                          After I deleted it, i got over half of free space.

                          alt text

                          I deleted it with this command.
                          rm -r /var/squid/logs in shell (8)

                          1 Reply Last reply Reply Quote 0
                          • provelsP
                            provels @FroLien
                            last edited by provels

                            @FroLien It's not the logs, it's the cached info that Squid serves (images, etc, etc) so they don't have to be retrieved again from the Internet. How much disk space do you have allocated for Squid in settings?

                            EDIT - Well OK then... :) It was the logs... I don't have Squid installed, so I don't know what the file structure is at that level. I still think I'd make your disk about 10-20GB...

                            Peder

                            MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                            BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                            F 2 Replies Last reply Reply Quote 0
                            • F
                              FroLien @provels
                              last edited by

                              Hi @provels
                              How can I check disk space of Squid?

                              1 Reply Last reply Reply Quote 0
                              • F
                                FroLien @provels
                                last edited by

                                Hi @provels
                                I think this is it? Please educate me how much space should I assign.

                                Squid Cache General Settings.PNG

                                Squid Hard Disk Cache Settings.PNG

                                Squid Memory Cache Settings.PNG

                                provelsP 1 Reply Last reply Reply Quote 0
                                • provelsP
                                  provels @FroLien
                                  last edited by provels

                                  @FroLien Those look like the defaults. But look on the Squid General /Logging Settings. You can either A) Disable logging or B) Set a period to rotate the logs (maybe a day? a week?). By default rotation is disabled, so the logs will keep growing until you run out of disk. If you are logging in Squidguard, too, you should also turn on rotation on first settings page.
                                  c2fc379b-d15d-45ad-abf0-f7df684a12c6-image.png

                                  Peder

                                  MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                  BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Almost always enabling squid logging without enabling rotation.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.