Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Disk usage ( / ) is 100%

    Off-Topic & Non-Support Discussion
    7
    24
    8701
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      FroLien last edited by

      Dear All
      May I ask you how to solve and how to clean anything from root directory.

      We use pfSense as a VM on ESXi 6.0. We assign 5GB of amount for root. When I check in pfSense WebGUI, Disk usage ( / ) is 100% full.

      Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

      Please may i know how can i solve this issue.

      Grimson 1 Reply Last reply Reply Quote 0
      • Grimson
        Grimson Banned @FroLien last edited by

        @frolien said in Disk usage ( / ) is 100%:

        Our pfSense version is 2.3.4 and FreeBSD 10.3-RELEASE-p19.

        Act like a responsible Admin and do a fresh install with a currently supported version, then you might get support.

        1 Reply Last reply Reply Quote 1
        • S
          SteveITS last edited by

          Check for log files? Are you running Suricata?

          https://forum.netgate.com/topic/137652/suricata-suricata-log-not-rotated
          https://forum.netgate.com/topic/140951/suricata-log-files-are-filling-the-disk
          https://forum.netgate.com/topic/130980/suricata-not-limiting-log-sizes-by-default

          Steve

          Only install packages for your version, or risk breaking it. If yours is older, select it in System/Update/Update Settings.
          When upgrading, let it finish; do not reboot early. Allow 10-15 minutes, or more depending on packages and device speed.

          F 1 Reply Last reply Reply Quote 0
          • KOM
            KOM last edited by

            Connect to the console. Run item 8 (Shell). Run this command and see where all the files are:

            du -Pshx /*
            
            F 1 Reply Last reply Reply Quote 1
            • Rico
              Rico LAYER 8 Rebel Alliance last edited by

              1. Take a full Backup in the WebGUI
              2. Reinstall 2.4.4-p1 with some more space
              3. Online Update to 2.4.4-p2
              4. Restore your Backup

              -Rico

              2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

              F 1 Reply Last reply Reply Quote 1
              • F
                FroLien @Rico last edited by

                Thank you for your reply @Rico
                If i reinstall, Can I use my backup of WebGUI completely without any changed? Because I am afraid that If I restore backup of WebGUI, i want to get back my all settings all rules without any error.

                1 Reply Last reply Reply Quote 0
                • F
                  FroLien @KOM last edited by

                  Than you for your reply @KOM
                  I run your command in pfSense command prompt, output was ..

                  8.0K /COPYRIGHT
                  1.1M /bin
                  58M /boot
                  0B /boot.config
                  3.1M /cf
                  0B /conf
                  12K /conf.default
                  3.0K /dev
                  7.3M /etc
                  20K /home
                  9.3M /lib
                  168K /libexec
                  4.0K /media
                  4.0K /mnt
                  4.0K /proc
                  7.6M /rescue
                  44K /root
                  4.7M /sbin
                  0B /sys
                  476K /tmp
                  601M /usr
                  4.6G /var

                  1 Reply Last reply Reply Quote 0
                  • provels
                    provels last edited by provels

                    It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick. If so, clear this check box and reset the logs to get the space back.

                    Screenshot_1.png

                    After that, I would check your rules and see if you have some excessive logging turned on there. Maybe someone created or was testing a rule and forgot to turn logging off. Hope this helps.

                    Peder

                    MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                    BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                    Grimson F 3 Replies Last reply Reply Quote 1
                    • Grimson
                      Grimson Banned @provels last edited by Grimson

                      @provels said in Disk usage ( / ) is 100%:

                      It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick.

                      pfSense uses circular logs, so unless he has increased the log file size setting considerably none of the logs from the base system will fill up the disk. This is more likely, and like @teamits suggested, a package going rampant.

                      1 Reply Last reply Reply Quote 1
                      • provels
                        provels last edited by

                        So

                        du -Pshx /var/*
                        
                         du -Pshx /var/log/*
                        

                        to track it down.

                        Peder

                        MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                        BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                        F 1 Reply Last reply Reply Quote 0
                        • F
                          FroLien @provels last edited by

                          Thank you for your reply @teamits
                          My system is not running Suricata?

                          1 Reply Last reply Reply Quote 0
                          • F
                            FroLien @provels last edited by

                            @provels
                            I clear that check box and reset the logs files. But still 100%.

                            provels 1 Reply Last reply Reply Quote 0
                            • F
                              FroLien @provels last edited by

                              @provels said in Disk usage ( / ) is 100%:

                              du -Pshx /var/log/*

                              I use above command in Command Prompt. But still 100%.

                              1 Reply Last reply Reply Quote 0
                              • provels
                                provels @FroLien last edited by

                                @FroLien Can you post the output results?

                                Peder

                                MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                                BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                F 1 Reply Last reply Reply Quote 1
                                • F
                                  FroLien @provels last edited by

                                  Hi @provels
                                  Thank you for your quick reply. May I show you my output results.

                                  du -Pshx /var/* output

                                  du -Pshx /var/log/* output

                                  provels 1 Reply Last reply Reply Quote 0
                                  • F
                                    FroLien @SteveITS last edited by

                                    Dear @teamits
                                    I am not running Suricata on my system.

                                    1 Reply Last reply Reply Quote 0
                                    • provels
                                      provels @FroLien last edited by

                                      @FroLien Looks like it's your Squid cache (I think so anyway, I don't run Squid). I think you just need a larger disk. Can you expand it? Maybe to 20GB?
                                      9501c1ee-444d-41a6-a6fc-edb616564076-image.png

                                      Peder

                                      MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                                      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                      F 2 Replies Last reply Reply Quote 0
                                      • F
                                        FroLien @provels last edited by

                                        @provels said in Disk usage ( / ) is 100%:

                                        be

                                        Can I delete logs folder from squid?

                                        provels 1 Reply Last reply Reply Quote 0
                                        • F
                                          FroLien @provels last edited by

                                          @provels
                                          Opps

                                          I deleted logs folder from /var/squid
                                          After I deleted it, i got over half of free space.

                                          alt text

                                          I deleted it with this command.
                                          rm -r /var/squid/logs in shell (8)

                                          1 Reply Last reply Reply Quote 0
                                          • provels
                                            provels @FroLien last edited by provels

                                            @FroLien It's not the logs, it's the cached info that Squid serves (images, etc, etc) so they don't have to be retrieved again from the Internet. How much disk space do you have allocated for Squid in settings?

                                            EDIT - Well OK then... :) It was the logs... I don't have Squid installed, so I don't know what the file structure is at that level. I still think I'd make your disk about 10-20GB...

                                            Peder

                                            MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                                            BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                            F 2 Replies Last reply Reply Quote 0
                                            • F
                                              FroLien @provels last edited by

                                              Hi @provels
                                              How can I check disk space of Squid?

                                              1 Reply Last reply Reply Quote 0
                                              • F
                                                FroLien @provels last edited by

                                                Hi @provels
                                                I think this is it? Please educate me how much space should I assign.

                                                Squid Cache General Settings.PNG

                                                Squid Hard Disk Cache Settings.PNG

                                                Squid Memory Cache Settings.PNG

                                                provels 1 Reply Last reply Reply Quote 0
                                                • provels
                                                  provels @FroLien last edited by provels

                                                  @FroLien Those look like the defaults. But look on the Squid General /Logging Settings. You can either A) Disable logging or B) Set a period to rotate the logs (maybe a day? a week?). By default rotation is disabled, so the logs will keep growing until you run out of disk. If you are logging in Squidguard, too, you should also turn on rotation on first settings page.
                                                  c2fc379b-d15d-45ad-abf0-f7df684a12c6-image.png

                                                  Peder

                                                  MAIN - pfSense+ 23.01-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD
                                                  BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                                  1 Reply Last reply Reply Quote 0
                                                  • Derelict
                                                    Derelict LAYER 8 Netgate last edited by

                                                    Almost always enabling squid logging without enabling rotation.

                                                    Chattanooga, Tennessee, USA
                                                    The pfSense Book is free of charge!
                                                    DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                                    1 Reply Last reply Reply Quote 0
                                                    • First post
                                                      Last post