[NTLUG:Discuss] /var out of space-Still-....help please

[kedbauer@swbell.net]

You might check to see how many files are still in the /var/log/mail and
/var/log/news directories.  If your directories are anything like how
mine were, you probably can't run ls or rm in the directory because
there are too many files.  In order to find out how many files there
are try this:

find /var/log/mail -name "*" -print | wc -l
find /var/log/news -name "*" -print | wc -l

If there are a lot of files (like 10s or 100s of thousands) then to
delete all of the gzip logs:

find /var/log/mail -name "*gz*" -exec rm {} \;
find /var/log/news -name "*gz*" -exec rm {} \;

Once you have the files deleted, edit the /var/lib/logrotate status
file to make is match the files that you now have in the /var/log/mail
and /var/log/news directories.  I used vi with global search and
replaces to edit out the backed up log files.  I'm sure that there is a
more elegant sed solution, but I'm not very well versed in how to use
sed.

When this happened to me all I was unable to write files to /var even
though I still had available disk space.  My guess is that maybe I ran
out of inodes.  If you are unable to create files on /var, then that
could prevent you from printing.  By removing the files, it should clear
up the printing problem.

Kyle


On Thu, 19 Oct 2000, ./aal observed:

> Dan Carlson wrote:
> > 
> > This could be caused by a problem with logrotate, where it continually
> > archives files in /var/log/news and /var/log/mail.  This problem occured on
> > my system, consuming several hundred megabytes of disk space before I found
> > it.  Here is Mandrake's advisory on the problem:
> > 
> > http://www.linux-mandrake.com/en/security/MDKA-2000-009-1.php3?dis=7.1
> 
> 
> 
> close....
> I have already applied those updates, before this problem arose.
> 
> I cant print, logrotate sucks up all my processor, is it time to apply
> the MS solution(wipe and start over)?
> 
> completely lost
> ./aal
> _______________________________________________
> http://ntlug.org/mailman/listinfo/discuss
> 

--