| View previous topic :: View next topic |
| Author |
Message |
swingarm
l33t
Joined: 08 Jun 2002
Posts: 627
Location: Northern Colorado
|
 Posted: Wed Dec 15, 2004 7:27 am Post subject: Something is not adding up |
 |
|
First all there's this:
| Code: |
hcfs root # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda3 2.4G 2.4G 3.5M 100% /
/dev/hda5 3.8G 1.1G 2.8G 28% /usr
/dev/hda6 3.0G 120M 2.9G 4% /var
none 62M 0 62M 0% /dev/shm
|
You'll notice that my root directory(hda3) only has 3.5MB of space left so I'm wondering where all my space went. I used this to try to find out:
| Code: |
hcfs root # du -m --max-depth=1 /
5 /bin
1 /dev
3 /etc
6 /lib
0 /mnt
0 /opt
1 /tmp
0 /sys
175 /var
1355 /usr
0 /boot
0 /home
129 /proc
6 /sbin
1 /root
|
Now I can't count /usr and /var because they are in seperate partitions(hda5 and hda6-see df -h results above). The numbers are in megabytes. If I add all those numbers up it doesn't add up to 2.2GB, all I can fathom is maybe that the du command doesn't count the /proc directory accurately. So where did my space go? |
|
| Back to top |
|
 |
papal_authority
Veteran
Joined: 31 Mar 2004
Posts: 1823
Location: Canada
|
| Posted: Wed Dec 15, 2004 8:27 am Post subject: |
|
|
I'd guess a corrupted file or a backup gone awry. Perhaps use find with the size option and see if you can locate a really large file.
_________________
The free market gave me gonorrhea. |
|
| Back to top |
|
|
gvs
n00b
Joined: 29 May 2004
Posts: 45
Location: EU - Belgium
|
| Posted: Wed Dec 15, 2004 11:53 am Post subject: Re: Something is not adding up |
|
|
| swingarm wrote: | First all there's this:
| Code: |
hcfs root # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda3 2.4G 2.4G 3.5M 100% /
/dev/hda5 3.8G 1.1G 2.8G 28% /usr
/dev/hda6 3.0G 120M 2.9G 4% /var
none 62M 0 62M 0% /dev/shm
|
You'll notice that my root directory(hda3) only has 3.5MB of space left so I'm wondering where all my space went. I used this to try to find out:
| Code: |
hcfs root # du -m --max-depth=1 /
5 /bin
1 /dev
3 /etc
6 /lib
0 /mnt
0 /opt
1 /tmp
0 /sys
175 /var
1355 /usr
0 /boot
0 /home
129 /proc
6 /sbin
1 /root
|
Now I can't count /usr and /var because they are in seperate partitions(hda5 and hda6-see df -h results above). The numbers are in megabytes. If I add all those numbers up it doesn't add up to 2.2GB, all I can fathom is maybe that the du command doesn't count the /proc directory accurately. So where did my space go? |
If you have been hacked (this alone is not evidence of that), it is possible that there are files hidden from your sight.
This can be done by:
create a file/files
Just fire up a process that keeps the filehandle open
delete the file.
Again, there is no evidence of something like this yet, but you might check it out.
What filesystem are you using, maybe fsck can help.
_________________
Registered Linux user #249404 - September 1997 |
|
| Back to top |
|
|
swingarm
l33t
Joined: 08 Jun 2002
Posts: 627
Location: Northern Colorado
|
| Posted: Thu Dec 16, 2004 2:48 am Post subject: |
|
|
| papal_authority wrote: | | I'd guess a corrupted file or a backup gone awry. Perhaps use find with the size option and see if you can locate a really large file. |
Well here is what i did:
| Code: |
hcfs root # find /* -size 10000k
find: /proc/13937/task/13937/fd/4: No such file or directory
|
As you can see I set it up to find a file that is over 10MB. It found a file in the /proc directory that doesn't exist? |
|
| Back to top |
|
|
|
Other Things Gentoo
