On 1/30/2013 6:54 AM, Bonno Bloksma wrote:
> Hi,
> 
> I had a problem that generated A LOT of messages in syslog and it grew untill 
> the entire /var partition had 0 bytes free.
> The /var/log/syslog file was over 4GB large. I deleted it using a simple rm 
> /var/log/syslog command and the file is indeed no longer there.
> The du /var/log -s command shows a decrease of over 4GB so that seems to 
> confirm it but....
> 
> There are still 0 bytes free on the /var partition as the df command shows.
> root@linutr:~# df
> Filesystem           1K-blocks      Used Available Use% Mounted on
> /dev/mapper/vgroup1-lvroot
>                        4805760   1306860   3254780  29% /
> tmpfs                  3058148         0   3058148   0% /lib/init/rw
> udev                   3052820       184   3052636   1% /dev
> tmpfs                  3058148         0   3058148   0% /dev/shm
> /dev/cciss/c0d0p1       282599     28719    239288  11% /boot
> /dev/mapper/vgroup1-lvusr
>                        4805760    472984   4088656  11% /usr
> /dev/mapper/vgroup1-lvvar
>                        9611492   9611492         0 100% /var
> root@linutr:~#
> 
> Also there is still no nerw syslog file, probably because the filesystem 
> shows 0 bytes free.
> /var is an ext3 partition
> 
> Should I just unmount /var, and run fsck.ext3 /var or is there something else 
> I should do first?
> Is there maybe some background process that is still running through all 
> inodes freeing up the 4+GB diskspace?

You probably simply need to run 'sync' and give the disks time to free
all the extents used by the 4GB syslog file.  Sync shouldn't return
until all pending writes are flushed.  So when sync returns you should
be all set.

Linux does extensive IO buffering, which is probably the cause of what
you're seeing.  sync should dix it by forcing a flush of all outstanding
writes.

-- 
Stan


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/51091c1e.1040...@hardwarefreak.com

Reply via email to