View previous topic :: View next topic |
Author |
Message |
swingarm l33t
Joined: 08 Jun 2002 Posts: 627 Location: Northern Colorado
|
Posted: Wed Dec 15, 2004 7:27 am Post subject: Something is not adding up |
|
|
First all there's this:
Code: |
hcfs root # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda3 2.4G 2.4G 3.5M 100% /
/dev/hda5 3.8G 1.1G 2.8G 28% /usr
/dev/hda6 3.0G 120M 2.9G 4% /var
none 62M 0 62M 0% /dev/shm
|
You'll notice that my root directory(hda3) only has 3.5MB of space left so I'm wondering where all my space went. I used this to try to find out:
Code: |
hcfs root # du -m --max-depth=1 /
5 /bin
1 /dev
3 /etc
6 /lib
0 /mnt
0 /opt
1 /tmp
0 /sys
175 /var
1355 /usr
0 /boot
0 /home
129 /proc
6 /sbin
1 /root
|
Now I can't count /usr and /var because they are in seperate partitions(hda5 and hda6-see df -h results above). The numbers are in megabytes. If I add all those numbers up it doesn't add up to 2.2GB, all I can fathom is maybe that the du command doesn't count the /proc directory accurately. So where did my space go? |
|
Back to top |
|
|
papal_authority Veteran
Joined: 31 Mar 2004 Posts: 1823 Location: Canada
|
Posted: Wed Dec 15, 2004 8:27 am Post subject: |
|
|
I'd guess a corrupted file or a backup gone awry. Perhaps use find with the size option and see if you can locate a really large file. _________________ The free market gave me gonorrhea. |
|
Back to top |
|
|
gvs n00b
Joined: 29 May 2004 Posts: 45 Location: EU - Belgium
|
Posted: Wed Dec 15, 2004 11:53 am Post subject: Re: Something is not adding up |
|
|
swingarm wrote: | First all there's this:
Code: |
hcfs root # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda3 2.4G 2.4G 3.5M 100% /
/dev/hda5 3.8G 1.1G 2.8G 28% /usr
/dev/hda6 3.0G 120M 2.9G 4% /var
none 62M 0 62M 0% /dev/shm
|
You'll notice that my root directory(hda3) only has 3.5MB of space left so I'm wondering where all my space went. I used this to try to find out:
Code: |
hcfs root # du -m --max-depth=1 /
5 /bin
1 /dev
3 /etc
6 /lib
0 /mnt
0 /opt
1 /tmp
0 /sys
175 /var
1355 /usr
0 /boot
0 /home
129 /proc
6 /sbin
1 /root
|
Now I can't count /usr and /var because they are in seperate partitions(hda5 and hda6-see df -h results above). The numbers are in megabytes. If I add all those numbers up it doesn't add up to 2.2GB, all I can fathom is maybe that the du command doesn't count the /proc directory accurately. So where did my space go? |
If you have been hacked (this alone is not evidence of that), it is possible that there are files hidden from your sight.
This can be done by:
create a file/files
Just fire up a process that keeps the filehandle open
delete the file.
Again, there is no evidence of something like this yet, but you might check it out.
What filesystem are you using, maybe fsck can help. _________________ Registered Linux user #249404 - September 1997 |
|
Back to top |
|
|
swingarm l33t
Joined: 08 Jun 2002 Posts: 627 Location: Northern Colorado
|
Posted: Thu Dec 16, 2004 2:48 am Post subject: |
|
|
papal_authority wrote: | I'd guess a corrupted file or a backup gone awry. Perhaps use find with the size option and see if you can locate a really large file. |
Well here is what i did:
Code: |
hcfs root # find /* -size 10000k
find: /proc/13937/task/13937/fd/4: No such file or directory
|
As you can see I set it up to find a file that is over 10MB. It found a file in the /proc directory that doesn't exist? |
|
Back to top |
|
|
|