• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Disk usage ( / ) is 100%

Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
24 Posts 7 Posters 18.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    Grimson Banned @provels
    last edited by Grimson Apr 5, 2019, 12:37 PM Apr 5, 2019, 12:37 PM

    @provels said in Disk usage ( / ) is 100%:

    It looks like everything is in /var where the logfiles are stored. I run a VM with a 4GB disk and only have 56MB there. Take a look at Status/System Logs/Settings and see if you are logging all traffic that is allowed to pass. That would fill things pretty quick.

    pfSense uses circular logs, so unless he has increased the log file size setting considerably none of the logs from the base system will fill up the disk. This is more likely, and like @teamits suggested, a package going rampant.

    1 Reply Last reply Reply Quote 1
    • P
      provels
      last edited by Apr 5, 2019, 1:02 PM

      So

      du -Pshx /var/*
      
       du -Pshx /var/log/*
      

      to track it down.

      Peder

      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

      F 1 Reply Last reply Apr 6, 2019, 11:14 AM Reply Quote 0
      • F
        FroLien @provels
        last edited by Apr 6, 2019, 11:05 AM

        Thank you for your reply @teamits
        My system is not running Suricata?

        1 Reply Last reply Reply Quote 0
        • F
          FroLien @provels
          last edited by Apr 6, 2019, 11:09 AM

          @provels
          I clear that check box and reset the logs files. But still 100%.

          P 1 Reply Last reply Apr 6, 2019, 11:15 AM Reply Quote 0
          • F
            FroLien @provels
            last edited by Apr 6, 2019, 11:14 AM

            @provels said in Disk usage ( / ) is 100%:

            du -Pshx /var/log/*

            I use above command in Command Prompt. But still 100%.

            1 Reply Last reply Reply Quote 0
            • P
              provels @FroLien
              last edited by Apr 6, 2019, 11:15 AM

              @FroLien Can you post the output results?

              Peder

              MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
              BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

              F 1 Reply Last reply Apr 6, 2019, 11:33 AM Reply Quote 1
              • F
                FroLien @provels
                last edited by Apr 6, 2019, 11:33 AM

                Hi @provels
                Thank you for your quick reply. May I show you my output results.

                du -Pshx /var/* output

                du -Pshx /var/log/* output

                P 1 Reply Last reply Apr 6, 2019, 11:41 AM Reply Quote 0
                • F
                  FroLien @SteveITS
                  last edited by Apr 6, 2019, 11:38 AM

                  Dear @teamits
                  I am not running Suricata on my system.

                  1 Reply Last reply Reply Quote 0
                  • P
                    provels @FroLien
                    last edited by Apr 6, 2019, 11:41 AM

                    @FroLien Looks like it's your Squid cache (I think so anyway, I don't run Squid). I think you just need a larger disk. Can you expand it? Maybe to 20GB?
                    9501c1ee-444d-41a6-a6fc-edb616564076-image.png

                    Peder

                    MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                    BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                    F 2 Replies Last reply Apr 6, 2019, 11:42 AM Reply Quote 0
                    • F
                      FroLien @provels
                      last edited by Apr 6, 2019, 11:42 AM

                      @provels said in Disk usage ( / ) is 100%:

                      be

                      Can I delete logs folder from squid?

                      P 1 Reply Last reply Apr 6, 2019, 11:50 AM Reply Quote 0
                      • F
                        FroLien @provels
                        last edited by Apr 6, 2019, 11:47 AM

                        @provels
                        Opps

                        I deleted logs folder from /var/squid
                        After I deleted it, i got over half of free space.

                        alt text

                        I deleted it with this command.
                        rm -r /var/squid/logs in shell (8)

                        1 Reply Last reply Reply Quote 0
                        • P
                          provels @FroLien
                          last edited by provels Apr 6, 2019, 2:06 PM Apr 6, 2019, 11:50 AM

                          @FroLien It's not the logs, it's the cached info that Squid serves (images, etc, etc) so they don't have to be retrieved again from the Internet. How much disk space do you have allocated for Squid in settings?

                          EDIT - Well OK then... :) It was the logs... I don't have Squid installed, so I don't know what the file structure is at that level. I still think I'd make your disk about 10-20GB...

                          Peder

                          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                          F 2 Replies Last reply Apr 6, 2019, 12:26 PM Reply Quote 0
                          • F
                            FroLien @provels
                            last edited by Apr 6, 2019, 12:26 PM

                            Hi @provels
                            How can I check disk space of Squid?

                            1 Reply Last reply Reply Quote 0
                            • F
                              FroLien @provels
                              last edited by Apr 6, 2019, 12:30 PM

                              Hi @provels
                              I think this is it? Please educate me how much space should I assign.

                              Squid Cache General Settings.PNG

                              Squid Hard Disk Cache Settings.PNG

                              Squid Memory Cache Settings.PNG

                              P 1 Reply Last reply Apr 6, 2019, 1:40 PM Reply Quote 0
                              • P
                                provels @FroLien
                                last edited by provels Apr 6, 2019, 1:45 PM Apr 6, 2019, 1:40 PM

                                @FroLien Those look like the defaults. But look on the Squid General /Logging Settings. You can either A) Disable logging or B) Set a period to rotate the logs (maybe a day? a week?). By default rotation is disabled, so the logs will keep growing until you run out of disk. If you are logging in Squidguard, too, you should also turn on rotation on first settings page.
                                c2fc379b-d15d-45ad-abf0-f7df684a12c6-image.png

                                Peder

                                MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                                BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                                1 Reply Last reply Reply Quote 0
                                • D
                                  Derelict LAYER 8 Netgate
                                  last edited by Apr 6, 2019, 7:09 PM

                                  Almost always enabling squid logging without enabling rotation.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  24 out of 24
                                  • First post
                                    24/24
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    This community forum collects and processes your personal information.
                                    consent.not_received