Re: ppp filling /var
On Thursday 02 June 2005 06:53 pm, Matthew Emmerton wrote: On Thu, 2 Jun 2005, James wrote: On Thursday 02 June 2005 07:30 am, Dmitry Mityugov wrote: On 6/2/05, James [EMAIL PROTECTED] wrote: Forgot to include this: FreeBSD 4.11-RELEASE-p2 #3 # cat ppp.conf: default: set device PPPoE:ed0 set speed sync set mru 1492 set mtu 1492 set ctsrts on #enable dns enable lqr set log phase tun add default HISADDR dsl: set authname set authkey ** # cat ppp.linkup MYADDR: !bg /sbin/natd -f /etc/natd.conf #cat natd.conf interface tun0 log yes ^^ - do you need this? Try using log no and see if your /var space issues go away. That fixed it! Thanks for the support people. I wasn't seeing /var/log/alias.log* growing to 100mb+ so I never considered that that was the problem. -rw--- 1 root wheel 80B Jun 2 18:00 /var/log/alias.log -rw--- 1 root wheel109K Jun 2 18:00 /var/log/alias.log.0.gz -rw--- 1 root wheel 44K Jun 2 05:00 /var/log/alias.log.1.gz -rw--- 1 root wheel 18K Apr 14 20:00 /var/log/alias.log.10.gz -rw--- 1 root wheel 37K May 26 15:00 /var/log/alias.log.2.gz -rw--- 1 root wheel 57K May 22 19:00 /var/log/alias.log.3.gz -rw--- 1 root wheel 68K May 12 05:00 /var/log/alias.log.4.gz -rw--- 1 root wheel 68K Apr 26 11:00 /var/log/alias.log.5.gz -rw--- 1 root wheel 8K Apr 23 06:00 /var/log/alias.log.6.gz -rw--- 1 root wheel 68K Apr 22 22:00 /var/log/alias.log.7.gz -rw--- 1 root wheel 58K Apr 22 00:00 /var/log/alias.log.8.gz -rw--- 1 root wheel 20K Apr 19 10:00 /var/log/alias.log.9.gz # man natd ... snip ... -log | -l Log various aliasing statistics and information to the file /var/log/alias.log. This file is truncated each time natd is started. ... snip ... Does log yes cause natd to write a log to a different place then -l It seems to have created some type of ghost file in var. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thursday 02 June 2005 04:47, the author James contributed to the dialogue on- ppp filling /var: After ppp runs for a few days: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M 252M -20.0M 109%/var !!! procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var After killing ppp: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M12M 219M 6%/var procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var Anyone know how to fix this? Google was no help. note: this is not a problem with /var/log/* filling up, as du will show, or any file written to disk... its *something* else Full output of du -h # du -h /var 2.0K/var/account 2.0K/var/at/jobs 2.0K/var/at/spool 6.0K/var/at 10.0K /var/backups 4.0K/var/crash 2.0K/var/cron/tabs 4.0K/var/cron 2.0K/var/db/ipf ... snip ... (/var/db/pkg/*) 2.2M/var/db/pkg 4.0K/var/db/ports/gettext 6.0K/var/db/ports 28K/var/db/portaudit 474K/var/db/tripwire/report 6.5M/var/db/tripwire 9.8M/var/db 2.0K/var/empty 2.0K/var/heimdal 1.7M/var/log 8.0K/var/mail 4.0K/var/msgs 2.0K/var/preserve 2.0K/var/run/ppp 94K/var/run 2.0K/var/rwho 2.0K/var/spool/lock 2.0K/var/spool/lpd 2.0K/var/spool/mqueue 2.0K/var/spool/opielocks 2.0K/var/spool/output/lpd 4.0K/var/spool/output 2.0K/var/spool/uucp/.Preserve 2.0K/var/spool/uucp/.Sequence 2.0K/var/spool/uucp/.Status 2.0K/var/spool/uucp/.Temp 2.0K/var/spool/uucp/.Xqtdir 12K/var/spool/uucp 2.0K/var/spool/uucppublic 4.0K/var/spool/clientmqueue 32K/var/spool 2.0K/var/tmp/vi.recover 112K/var/tmp/etc/defaults 2.0K/var/tmp/etc/X11 4.0K/var/tmp/etc/gnats 52K/var/tmp/etc/isdn 2.0K/var/tmp/etc/kerberosIV 294K/var/tmp/etc/mail 56K/var/tmp/etc/mtree 16K/var/tmp/etc/namedb 50K/var/tmp/etc/periodic/daily 6.0K/var/tmp/etc/periodic/monthly 42K/var/tmp/etc/periodic/security 18K/var/tmp/etc/periodic/weekly 118K/var/tmp/etc/periodic 4.0K/var/tmp/etc/ppp 2.0K/var/tmp/etc/skel 108K/var/tmp/etc/ssh 10.0K /var/tmp/etc/ssl 22K/var/tmp/etc/uucp 1.3M/var/tmp/etc 1.3M/var/tmp 22K/var/yp 2.0K/var/games/hackdir/save 4.0K/var/games/hackdir 2.0K/var/games/larn 2.0K/var/games/phantasia 10.0K /var/games 13M/var I presume you are running ppp as a masquerading engine on an internal lan. Is this a new phenomenon or has it been with you ever since you started ppp? The fact that you have such a comparatively large /var suggests that the machine may have been set up with this purpose in mind and that you simply need a larger /var. If the problem is new/intermittent then you might want to monitor look your network traffic carefully to identify the source. David ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- 40 yrs navigating and computing in blue waters. English Owner Captain of British Registered 60' bluewater Ketch S/V Taurus. Currently in San Diego, CA. Sailing May/June bound for Europe via Panama Canal. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
Forgot to include this: FreeBSD 4.11-RELEASE-p2 #3 # cat ppp.conf: default: set device PPPoE:ed0 set speed sync set mru 1492 set mtu 1492 set ctsrts on #enable dns enable lqr set log phase tun add default HISADDR dsl: set authname set authkey ** # cat ppp.linkup MYADDR: !bg /sbin/natd -f /etc/natd.conf #cat natd.conf interface tun0 log yes use_sockets yes same_ports yes redirect_port udp 10.0.0.10:53 53 redirect_port tcp 10.0.0.101:22 22 redirect_port tcp 10.0.0.101:25 25 redirect_port tcp 10.0.0.101:80 80 redirect_port tcp 10.0.0.101:110 110 redirect_port tcp 10.0.0.101:443 443 redirect_port tcp 10.0.0.101:587 587 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thursday 02 June 2005 04:52 am, Vizion wrote: On Thursday 02 June 2005 04:47, the author James contributed to the dialogue on- ppp filling /var: After ppp runs for a few days: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M 252M -20.0M 109%/var !!! procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var After killing ppp: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M12M 219M 6%/var procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var Anyone know how to fix this? Google was no help. note: this is not a problem with /var/log/* filling up, as du will show, or any file written to disk... its *something* else Full output of du -h # du -h /var 2.0K/var/account 2.0K/var/at/jobs 2.0K/var/at/spool 6.0K/var/at 10.0K /var/backups 4.0K/var/crash 2.0K/var/cron/tabs 4.0K/var/cron 2.0K/var/db/ipf ... snip ... (/var/db/pkg/*) 2.2M/var/db/pkg 4.0K/var/db/ports/gettext 6.0K/var/db/ports 28K/var/db/portaudit 474K/var/db/tripwire/report 6.5M/var/db/tripwire 9.8M/var/db 2.0K/var/empty 2.0K/var/heimdal 1.7M/var/log 8.0K/var/mail 4.0K/var/msgs 2.0K/var/preserve 2.0K/var/run/ppp 94K/var/run 2.0K/var/rwho 2.0K/var/spool/lock 2.0K/var/spool/lpd 2.0K/var/spool/mqueue 2.0K/var/spool/opielocks 2.0K/var/spool/output/lpd 4.0K/var/spool/output 2.0K/var/spool/uucp/.Preserve 2.0K/var/spool/uucp/.Sequence 2.0K/var/spool/uucp/.Status 2.0K/var/spool/uucp/.Temp 2.0K/var/spool/uucp/.Xqtdir 12K/var/spool/uucp 2.0K/var/spool/uucppublic 4.0K/var/spool/clientmqueue 32K/var/spool 2.0K/var/tmp/vi.recover 112K/var/tmp/etc/defaults 2.0K/var/tmp/etc/X11 4.0K/var/tmp/etc/gnats 52K/var/tmp/etc/isdn 2.0K/var/tmp/etc/kerberosIV 294K/var/tmp/etc/mail 56K/var/tmp/etc/mtree 16K/var/tmp/etc/namedb 50K/var/tmp/etc/periodic/daily 6.0K/var/tmp/etc/periodic/monthly 42K/var/tmp/etc/periodic/security 18K/var/tmp/etc/periodic/weekly 118K/var/tmp/etc/periodic 4.0K/var/tmp/etc/ppp 2.0K/var/tmp/etc/skel 108K/var/tmp/etc/ssh 10.0K /var/tmp/etc/ssl 22K/var/tmp/etc/uucp 1.3M/var/tmp/etc 1.3M/var/tmp 22K/var/yp 2.0K/var/games/hackdir/save 4.0K/var/games/hackdir 2.0K/var/games/larn 2.0K/var/games/phantasia 10.0K /var/games 13M/var I presume you are running ppp as a masquerading engine on an internal lan. Is this a new phenomenon or has it been with you ever since you started ppp? The fact that you have such a comparatively large /var suggests that the machine may have been set up with this purpose in mind and that you simply need a larger /var. If the problem is new/intermittent then you might want to monitor look your network traffic carefully to identify the source. David I am running ppp to establish the dsl link so the firewall box gets assigned the static ip and not the qwest gateway/modem and natd handles the nat. This has been happening since I setup ppp The size is the sysconfig default size for /var if auto is selected for the partition creation. If the problem is new/intermittent then you might want to monitor look your network traffic carefully to identify the source. not sure what you are suggesting, its not logs filling /var. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: ppp filling /var
Your post subject says that ppp is filling up /var but then in the body of your post you say that /var/log is not being filled. Change the subject to be more meaningful. This is not a ppp problem but allocated HD space problem. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thursday 02 June 2005 05:06, the author James contributed to the dialogue on- Re: ppp filling /var: On Thursday 02 June 2005 04:52 am, Vizion wrote: On Thursday 02 June 2005 04:47, the author James contributed to the dialogue on- ppp filling /var: After ppp runs for a few days: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M 252M -20.0M 109%/var !!! procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var After killing ppp: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M12M 219M 6%/var procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var Anyone know how to fix this? Google was no help. note: this is not a problem with /var/log/* filling up, as du will show, or any file written to disk... its *something* else Full output of du -h # du -h /var 2.0K/var/account 2.0K/var/at/jobs 2.0K/var/at/spool 6.0K/var/at 10.0K /var/backups 4.0K/var/crash 2.0K/var/cron/tabs 4.0K/var/cron 2.0K/var/db/ipf ... snip ... (/var/db/pkg/*) 2.2M/var/db/pkg 4.0K/var/db/ports/gettext 6.0K/var/db/ports 28K/var/db/portaudit 474K/var/db/tripwire/report 6.5M/var/db/tripwire 9.8M/var/db 2.0K/var/empty 2.0K/var/heimdal 1.7M/var/log 8.0K/var/mail 4.0K/var/msgs 2.0K/var/preserve 2.0K/var/run/ppp 94K/var/run 2.0K/var/rwho 2.0K/var/spool/lock 2.0K/var/spool/lpd 2.0K/var/spool/mqueue 2.0K/var/spool/opielocks 2.0K/var/spool/output/lpd 4.0K/var/spool/output 2.0K/var/spool/uucp/.Preserve 2.0K/var/spool/uucp/.Sequence 2.0K/var/spool/uucp/.Status 2.0K/var/spool/uucp/.Temp 2.0K/var/spool/uucp/.Xqtdir 12K/var/spool/uucp 2.0K/var/spool/uucppublic 4.0K/var/spool/clientmqueue 32K/var/spool 2.0K/var/tmp/vi.recover 112K/var/tmp/etc/defaults 2.0K/var/tmp/etc/X11 4.0K/var/tmp/etc/gnats 52K/var/tmp/etc/isdn 2.0K/var/tmp/etc/kerberosIV 294K/var/tmp/etc/mail 56K/var/tmp/etc/mtree 16K/var/tmp/etc/namedb 50K/var/tmp/etc/periodic/daily 6.0K/var/tmp/etc/periodic/monthly 42K/var/tmp/etc/periodic/security 18K/var/tmp/etc/periodic/weekly 118K/var/tmp/etc/periodic 4.0K/var/tmp/etc/ppp 2.0K/var/tmp/etc/skel 108K/var/tmp/etc/ssh 10.0K /var/tmp/etc/ssl 22K/var/tmp/etc/uucp 1.3M/var/tmp/etc 1.3M/var/tmp 22K/var/yp 2.0K/var/games/hackdir/save 4.0K/var/games/hackdir 2.0K/var/games/larn 2.0K/var/games/phantasia 10.0K /var/games 13M/var I presume you are running ppp as a masquerading engine on an internal lan. Is this a new phenomenon or has it been with you ever since you started ppp? The fact that you have such a comparatively large /var suggests that the machine may have been set up with this purpose in mind and that you simply need a larger /var. If the problem is new/intermittent then you might want to monitor look your network traffic carefully to identify the source. David I am running ppp to establish the dsl link so the firewall box gets assigned the static ip and not the qwest gateway/modem and natd handles the nat. This has been happening since I setup ppp The size is the sysconfig default size for /var if auto is selected for the partition creation. If the problem is new/intermittent then you might want to monitor look your network traffic carefully to identify the source. not sure what you are suggesting, its not logs filling /var. I do not know how to calculate the amount of space that ppp uses in var (or even in what way) but am pretty sure the autoconfig would not do the caluculations either. You probably need to get some help from someone experienced in using ppp in this way David ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- 40 yrs navigating and computing in blue waters. English Owner Captain of British Registered 60' bluewater Ketch S/V Taurus. Currently in San Diego, CA. Sailing May/June bound for Europe via Panama Canal. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
James wrote: After ppp runs for a few days: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M 252M -20.0M 109%/var !!! procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var If a file is opened, deleted and then written to, it will keep taking space without showing up under du. Does fstat show anything useful when ppp is running? Could you use pppd instead? --Alex ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On 6/2/05, James [EMAIL PROTECTED] wrote: Forgot to include this: FreeBSD 4.11-RELEASE-p2 #3 # cat ppp.conf: default: set device PPPoE:ed0 set speed sync set mru 1492 set mtu 1492 set ctsrts on #enable dns enable lqr set log phase tun add default HISADDR dsl: set authname set authkey ** # cat ppp.linkup MYADDR: !bg /sbin/natd -f /etc/natd.conf #cat natd.conf interface tun0 log yes use_sockets yes same_ports yes redirect_port udp 10.0.0.10:53 53 redirect_port tcp 10.0.0.101:22 22 redirect_port tcp 10.0.0.101:25 25 redirect_port tcp 10.0.0.101:80 80 redirect_port tcp 10.0.0.101:110 110 redirect_port tcp 10.0.0.101:443 443 redirect_port tcp 10.0.0.101:587 587 Not sure if this even possible but if nobody else gives a better idea - can't this be caused by natd, or the way you start it from ppp.linkup? Can you use nat embetted in ppp instead? -- Dmitry We live less by imagination than despite it - Rockwell Kent, N by E ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thursday 02 June 2005 07:21 am, Alex Zbyslaw wrote: James wrote: After ppp runs for a few days: # df FilesystemSize Used Avail Capacity Mounted on /dev/ad0s1a 126M49M67M42%/ /dev/ad0s1f 252M18K 232M 0%/tmp /dev/ad0s1g 8.1G 1.1G 6.4G15%/usr /dev/ad0s1e 252M 252M -20.0M 109%/var !!! procfs4.0K 4.0K 0B 100%/proc # du -h /var ... snip ... 12M/var If a file is opened, deleted and then written to, it will keep taking space without showing up under du. Does fstat show anything useful when ppp is running? Could you use pppd instead? # fstat -f /var USER CMD PID FD MOUNT INUM MODE SZ|DV R/W aksisfstat 72843 wd /var 16259 drwxr-xr-x1536 r root natd 722994 /var 16266 -rw--- 31316863 w aksisbash 68199 wd /var 16259 drwxr-xr-x1536 r smmspsendmail 318 wd /var 34 drwxrwx--- 512 r smmspsendmail 3184 /var244 -rw--- 49 w root sendmail 315 wd /var 23 drwxr-xr-x 512 r root sendmail 3157 /var 96 -rw--- 43 w root cron 217 wd /var 9 drwxr-x--- 512 r root cron 2173 /var304 -rw-r--r-- 4 rw root syslogd 2097 /var 16290 -rw--- 100708 w root syslogd 2098 /var 16285 -rw--- 86683 w root syslogd 2099 /var 16279 -rw--- 12534 w root syslogd 209 10 /var 16325 -rw---1892 w root syslogd 209 11 /var 16281 -rw-r--r-- 0 w root syslogd 209 12 /var 16301 -rw--- 11407 w root syslogd 209 13 /var 16317 -rw--- 83869 w root syslogd 209 15 /var 16286 -rw-r- 0 w root syslogd 209 16 /var 16263 -rw--- 26137 w So it looks like it is natd and not ppp. lsof isn't showing what file natd has open and is writing to. At this time, I don't know how to configure pppd, so I can't use it yet. :-( What does natd do that !!! :-\ is that a bug? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thursday 02 June 2005 07:30 am, Dmitry Mityugov wrote: On 6/2/05, James [EMAIL PROTECTED] wrote: Forgot to include this: FreeBSD 4.11-RELEASE-p2 #3 # cat ppp.conf: default: set device PPPoE:ed0 set speed sync set mru 1492 set mtu 1492 set ctsrts on #enable dns enable lqr set log phase tun add default HISADDR dsl: set authname set authkey ** # cat ppp.linkup MYADDR: !bg /sbin/natd -f /etc/natd.conf #cat natd.conf interface tun0 log yes use_sockets yes same_ports yes redirect_port udp 10.0.0.10:53 53 redirect_port tcp 10.0.0.101:22 22 redirect_port tcp 10.0.0.101:25 25 redirect_port tcp 10.0.0.101:80 80 redirect_port tcp 10.0.0.101:110 110 redirect_port tcp 10.0.0.101:443 443 redirect_port tcp 10.0.0.101:587 587 Not sure if this even possible but if nobody else gives a better idea - can't this be caused by natd, or the way you start it from ppp.linkup? Can you use nat embetted in ppp instead? It is natd causing this. I configured this box a while ago, and if I remember correctly, I didn't use the ppp -nat is that I had alot of problems with the ipfw rules. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ppp filling /var
On Thu, 2 Jun 2005, James wrote: On Thursday 02 June 2005 07:30 am, Dmitry Mityugov wrote: On 6/2/05, James [EMAIL PROTECTED] wrote: Forgot to include this: FreeBSD 4.11-RELEASE-p2 #3 # cat ppp.conf: default: set device PPPoE:ed0 set speed sync set mru 1492 set mtu 1492 set ctsrts on #enable dns enable lqr set log phase tun add default HISADDR dsl: set authname set authkey ** # cat ppp.linkup MYADDR: !bg /sbin/natd -f /etc/natd.conf #cat natd.conf interface tun0 log yes ^^ - do you need this? Try using log no and see if your /var space issues go away. -- Matt Emmerton ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
