• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Disk usage ( / ) is 100%

Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
24 Posts 7 Posters 17.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    FroLien
    last edited by Mar 7, 2019, 11:17 AM

    Dear All
    May I ask you how to solve and how to clean anything from root directory.

    We use pfSense as a VM on ESXi 6.0. We assign 5GB of amount for root. When I check in pfSense WebGUI, Disk usage ( / ) is 100% full.

    Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

    Please may i know how can i solve this issue.

    G 1 Reply Last reply Mar 7, 2019, 11:24 AM Reply Quote 0
    • G
      Grimson Banned @FroLien
      last edited by Mar 7, 2019, 11:24 AM

      @frolien said in Disk usage ( / ) is 100%:

      Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

      Act like a responsible Admin and do a fresh install with a currently supported version, then you might get support.

      1 Reply Last reply Reply Quote 1
      • S
        SteveITS Galactic Empire
        last edited by Mar 7, 2019, 7:45 PM

        Check for log files? Are you running Suricata?

        https://forum.netgate.com/topic/137652/suricata-suricata-log-not-rotated
        https://forum.netgate.com/topic/140951/suricata-log-files-are-filling-the-disk
        https://forum.netgate.com/topic/130980/suricata-not-limiting-log-sizes-by-default

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        F 1 Reply Last reply Apr 6, 2019, 11:38 AM Reply Quote 0
        • K
          KOM
          last edited by Mar 7, 2019, 7:51 PM

          Connect to the console. Run item 8 (Shell). Run this command and see where all the files are:

          du -Pshx /*
          
          F 1 Reply Last reply Apr 5, 2019, 3:15 AM Reply Quote 2
          • R
            Rico LAYER 8 Rebel Alliance
            last edited by Mar 7, 2019, 9:22 PM

            1. Take a full Backup in the WebGUI
            2. Reinstall 2.4.4-p1 with some more space
            3. Online Update to 2.4.4-p2
            4. Restore your Backup

            -Rico

            F 1 Reply Last reply Apr 5, 2019, 3:11 AM Reply Quote 1
            • F
              FroLien @Rico
              last edited by Apr 5, 2019, 3:11 AM

              Thank you for your reply @Rico
              If i reinstall, Can I use my backup of WebGUI completely without any changed? Because I am afraid that If I restore backup of WebGUI, i want to get back my all settings all rules without any error.

              1 Reply Last reply Reply Quote 0
              • F
                FroLien @KOM
                last edited by Apr 5, 2019, 3:15 AM

                Than you for your reply @KOM
                I run your command in pfSense command prompt, output was ..

                8.0K /COPYRIGHT
                1.1M /bin
                58M /boot
                0B /boot.config
                3.1M /cf
                0B /conf
                12K /conf.default
                3.0K /dev
                7.3M /etc
                20K /home
                9.3M /lib
                168K /libexec
                4.0K /media
                4.0K /mnt
                4.0K /proc
                7.6M /rescue
                44K /root
                4.7M /sbin
                0B /sys
                476K /tmp
                601M /usr
                4.6G /var

                1 Reply Last reply Reply Quote 0
                • P
                  provels
                  last edited by provels Apr 5, 2019, 12:05 PM Apr 5, 2019, 12:01 PM

                  It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick. If so, clear this check box and reset the logs to get the space back.

                  Screenshot_1.png

                  After that, I would check your rules and see if you have some excessive logging turned on there. Maybe someone created or was testing a rule and forgot to turn logging off. Hope this helps.

                  Peder

                  MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                  BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                  G F 3 Replies Last reply Apr 5, 2019, 12:37 PM Reply Quote 1
                  • G
                    Grimson Banned @provels
                    last edited by Grimson Apr 5, 2019, 12:37 PM Apr 5, 2019, 12:37 PM

                    @provels said in Disk usage ( / ) is 100%:

                    It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick.

                    pfSense uses circular logs, so unless he has increased the log file size setting considerably none of the logs from the base system will fill up the disk. This is more likely, and like @teamits suggested, a package going rampant.

                    1 Reply Last reply Reply Quote 1
                    • P
                      provels
                      last edited by Apr 5, 2019, 1:02 PM

                      So

                      du -Pshx /var/*
                      
                       du -Pshx /var/log/*
                      

                      to track it down.

                      Peder

                      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                      F 1 Reply Last reply Apr 6, 2019, 11:14 AM Reply Quote 0
                      • F
                        FroLien @provels
                        last edited by Apr 6, 2019, 11:05 AM

                        Thank you for your reply @teamits
                        My system is not running Suricata?

                        1 Reply Last reply Reply Quote 0
                        • F
                          FroLien @provels
                          last edited by Apr 6, 2019, 11:09 AM

                          @provels
                          I clear that check box and reset the logs files. But still 100%.

                          P 1 Reply Last reply Apr 6, 2019, 11:15 AM Reply Quote 0
                          • F
                            FroLien @provels
                            last edited by Apr 6, 2019, 11:14 AM

                            @provels said in Disk usage ( / ) is 100%:

                            du -Pshx /var/log/*

                            I use above command in Command Prompt. But still 100%.

                            1 Reply Last reply Reply Quote 0
                            • P
                              provels @FroLien
                              last edited by Apr 6, 2019, 11:15 AM

                              @FroLien Can you post the output results?

                              Peder

                              MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                              BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                              F 1 Reply Last reply Apr 6, 2019, 11:33 AM Reply Quote 1
                              • F
                                FroLien @provels
                                last edited by Apr 6, 2019, 11:33 AM

                                Hi @provels
                                Thank you for your quick reply. May I show you my output results.

                                du -Pshx /var/* output

                                du -Pshx /var/log/* output

                                P 1 Reply Last reply Apr 6, 2019, 11:41 AM Reply Quote 0
                                • F
                                  FroLien @SteveITS
                                  last edited by Apr 6, 2019, 11:38 AM

                                  Dear @teamits
                                  I am not running Suricata on my system.

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    provels @FroLien
                                    last edited by Apr 6, 2019, 11:41 AM

                                    @FroLien Looks like it's your Squid cache (I think so anyway, I don't run Squid). I think you just need a larger disk. Can you expand it? Maybe to 20GB?
                                    9501c1ee-444d-41a6-a6fc-edb616564076-image.png

                                    Peder

                                    MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                    BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                    F 2 Replies Last reply Apr 6, 2019, 11:42 AM Reply Quote 0
                                    • F
                                      FroLien @provels
                                      last edited by Apr 6, 2019, 11:42 AM

                                      @provels said in Disk usage ( / ) is 100%:

                                      be

                                      Can I delete logs folder from squid?

                                      P 1 Reply Last reply Apr 6, 2019, 11:50 AM Reply Quote 0
                                      • F
                                        FroLien @provels
                                        last edited by Apr 6, 2019, 11:47 AM

                                        @provels
                                        Opps

                                        I deleted logs folder from /var/squid
                                        After I deleted it, i got over half of free space.

                                        alt text

                                        I deleted it with this command.
                                        rm -r /var/squid/logs in shell (8)

                                        1 Reply Last reply Reply Quote 0
                                        • P
                                          provels @FroLien
                                          last edited by provels Apr 6, 2019, 2:06 PM Apr 6, 2019, 11:50 AM

                                          @FroLien It's not the logs, it's the cached info that Squid serves (images, etc, etc) so they don't have to be retrieved again from the Internet. How much disk space do you have allocated for Squid in settings?

                                          EDIT - Well OK then... :) It was the logs... I don't have Squid installed, so I don't know what the file structure is at that level. I still think I'd make your disk about 10-20GB...

                                          Peder

                                          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                          F 2 Replies Last reply Apr 6, 2019, 12:26 PM Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received