RE: How to locate small file consumption creep

2008-12-28 Thread Lisa Kachold

Keerectamundo!
Dyslexic keyboard - I have to get a new one!

Thanks for correcting my syntax Ryan!


www.Obnosis.com |  http://en.wiktionary.org/wiki/Citations:obnosis |  
hackfest.obnosis.com (503)754-4452
January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security 
Forensics @ UAT 1/10/09 12-3PM
Take the Black [Linux BT3] Pill  leave SecurityMatrix, or take the Blue 
[XP/Vista Pill]  stay happily ignorant.

Date: Sat, 27 Dec 2008 23:30:11 -0700
From: phrkonale...@gmail.com
To: plug-discuss@lists.plug.phoenix.az.us
Subject: Re: How to locate small file consumption creep



find / -atime +1 /tmp/fileage # put list of files starting at / into a tmp 
file called fileage


I believe that should be
find / -atime +1  /tmp/fileage

Note the reverse in the redirect symbol.

Night.

_
Send e-mail anywhere. No map, no compass.
http://windowslive.com/oneline/hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_anywhere_122008---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

Re: How to locate small file consumption creep

2008-12-28 Thread Ryan Rix
On Sunday 28 December 2008 6:12:01 pm Lisa Kachold wrote:
 Keerectamundo!
 Dyslexic keyboard - I have to get a new one!

 Thanks for correcting my syntax Ryan!


Also to ben. I believe it should be mtime, as he said.

~Ryan


 www.Obnosis.com |  http://en.wiktionary.org/wiki/Citations:obnosis | 
 hackfest.obnosis.com (503)754-4452 January PLUG HackFest = Kristy 
Westphal,
 AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM Take 
the
 Black [Linux BT3] Pill  leave SecurityMatrix, or take the Blue [XP/Vista
 Pill]  stay happily ignorant.

 Date: Sat, 27 Dec 2008 23:30:11 -0700
 From: phrkonale...@gmail.com
 To: plug-discuss@lists.plug.phoenix.az.us
 Subject: Re: How to locate small file consumption creep



 find / -atime +1 /tmp/fileage # put list of files starting at / into a tmp
 file called fileage


 I believe that should be
 find / -atime +1  /tmp/fileage

 Note the reverse in the redirect symbol.

 Night.

 _
 Send e-mail anywhere. No map, no compass.
 
http://windowslive.com/oneline/hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_anywhe
re_122008

---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


Re: How to locate small file consumption creep

2008-12-27 Thread Ryan Rix

 find / -atime +1 /tmp/fileage # put list of files starting at / into a tmp 
 file called fileage


 I believe that should be
find / -atime +1  /tmp/fileage

Note the reverse in the redirect symbol.

Night.
---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

How to locate small file consumption creep

2008-12-24 Thread Josef Lowder
How can I locate what seems to be a small file consumption
creep on my system.  In one 10-gig partition, I have about 1.1 gig
of free space available, but I've noticed that some of this space
seems to go away overnight when nothing is running.

For example, last night 'df' showed this:
FilesystemSize  Used Avail Use% Mounted on
/dev/hda2 9.9G  2.7G  6.7G  29% /
/dev/hda1  76M  5.3M   67M   8% /boot
/dev/hda3 9.9G  8.8G  1.1G  90% /home
/dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7

And this morning, 'df' showed this:
FilesystemSize  Used Avail Use% Mounted on
/dev/hda2 9.9G  2.7G  6.7G  29% /
/dev/hda1  76M  5.3M   67M   8% /boot
/dev/hda3 9.9G  9.0G  951M  91% /home
/dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7

So what could account for the loss of file space from
1.1G to 951M overnight with nothing running
and how could I search my system to find an answer?
---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


Re: How to locate small file consumption creep

2008-12-24 Thread Tuna
Perhaps you have an app running that likes putting stuff in its 
respective folder in ~/.*?

For example, if Firefox were to fill it's cache in ~/.mozilla/. An 
unlikely cause, but do you get my idea?

What do you normally have running overnight?

Josef Lowder wrote:
 How can I locate what seems to be a small file consumption
 creep on my system.  In one 10-gig partition, I have about 1.1 gig
 of free space available, but I've noticed that some of this space
 seems to go away overnight when nothing is running.
 
 For example, last night 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  8.8G  1.1G  90% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
 And this morning, 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  9.0G  951M  91% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
 So what could account for the loss of file space from
 1.1G to 951M overnight with nothing running
 and how could I search my system to find an answer?
 ---
 PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
 To subscribe, unsubscribe, or to change your mail settings:
 http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
 

---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


Re: How to locate small file consumption creep

2008-12-24 Thread Eric Shubert
Josef Lowder wrote:
 How can I locate what seems to be a small file consumption
 creep on my system.  In one 10-gig partition, I have about 1.1 gig
 of free space available, but I've noticed that some of this space
 seems to go away overnight when nothing is running.
 
 For example, last night 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  8.8G  1.1G  90% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
 And this morning, 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  9.0G  951M  91% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
 So what could account for the loss of file space from
 1.1G to 951M overnight with nothing running
 and how could I search my system to find an answer?

There are always 'things' running behind the scenes, such as cron and 
anything that cron's scheduled to run. The process that created 
something in your /home partition could be one of many things.

For a hint, you might try running a find command looking for anything 
with a recent time stamp, such as
# find /home -mmin 480 -exec ls -l {} \;
See man find for details.

-- 
-Eric 'shubes'

---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


Re: How to locate small file consumption creep

2008-12-24 Thread wayne
Most likely a hidden file or files. Since it is in HOME

I run Kubuntu. (I) would use Krusader to compare directories, BUT I'll 
bet there is someone here with a simple command line that will do the 
trick. :-)


Josef Lowder wrote:
 How can I locate what seems to be a small file consumption
 creep on my system.  In one 10-gig partition, I have about 1.1 gig
 of free space available, but I've noticed that some of this space
 seems to go away overnight when nothing is running.

 For example, last night 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  8.8G  1.1G  90% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7

 And this morning, 'df' showed this:
 FilesystemSize  Used Avail Use% Mounted on
 /dev/hda2 9.9G  2.7G  6.7G  29% /
 /dev/hda1  76M  5.3M   67M   8% /boot
 /dev/hda3 9.9G  9.0G  951M  91% /home
 /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7

 So what could account for the loss of file space from
 1.1G to 951M overnight with nothing running
 and how could I search my system to find an answer?
 ---
 PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
 To subscribe, unsubscribe, or to change your mail settings:
 http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

   

---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


RE: How to locate small file consumption creep

2008-12-24 Thread Lisa Kachold

find / -atime +1 # fild all files starting at / accessed 1 day ago.
find / -atime +1 /tmp/fileage # put list of files starting at / into a tmp 
file called fileage
find . -atime +1 -type f -exec mv {} TMP \; # mv files accessed (in . dirspec) 
from 1 day to dir TMP

Note differences between atime, ctime and mtime:

-atime/-ctime/-mtime 
[+|-]n

Specify selection of the files based on  three 
Unix timestamps: the last time 
a files's access time, file status and modification time.


n  is time 
interval -- an integer with optional sign. It is measured in 
24-hour periods (days) or minutes counted from the current moment.n: If 
the integer n does not have 
sign this means exactly n 24-hour periods (days) ago, 0 means 
today. 

+n: if it has plus sing, then it 
means more then n 24-hour periods (days) ago, or older then n,

-n: if it has the minus sign, then 
it means less than n 24-hour periods (days) ago (-n), or 
younger then 
n. It's evident that -1,  and 0 are the same and both means 
today.

http://www.wagoneers.com/UNIX/FIND/find-usage.html

www.Obnosis.com |  http://en.wiktionary.org/wiki/Citations:obnosis |  
hackfest.obnosis.com (503)754-4452
January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security 
Forensics @ UAT 1/10/09 12-3PM
Take the Black [Linux BT3] Pill  leave SecurityMatrix, or take the Blue 
[XP/Vista Pill]  stay happily ignorant.


 Date: Wed, 24 Dec 2008 08:56:56 -0700
 From: wayda...@cox.net
 To: plug-discuss@lists.plug.phoenix.az.us
 Subject: Re: How to locate small file consumption creep
 
 Most likely a hidden file or files. Since it is in HOME
 
 I run Kubuntu. (I) would use Krusader to compare directories, BUT I'll 
 bet there is someone here with a simple command line that will do the 
 trick. :-)
 
 
 Josef Lowder wrote:
  How can I locate what seems to be a small file consumption
  creep on my system.  In one 10-gig partition, I have about 1.1 gig
  of free space available, but I've noticed that some of this space
  seems to go away overnight when nothing is running.
 
  For example, last night 'df' showed this:
  FilesystemSize  Used Avail Use% Mounted on
  /dev/hda2 9.9G  2.7G  6.7G  29% /
  /dev/hda1  76M  5.3M   67M   8% /boot
  /dev/hda3 9.9G  8.8G  1.1G  90% /home
  /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
  And this morning, 'df' showed this:
  FilesystemSize  Used Avail Use% Mounted on
  /dev/hda2 9.9G  2.7G  6.7G  29% /
  /dev/hda1  76M  5.3M   67M   8% /boot
  /dev/hda3 9.9G  9.0G  951M  91% /home
  /dev/hda7 9.9G  7.3G  2.1G  78% /mnt/hda7
 
  So what could account for the loss of file space from
  1.1G to 951M overnight with nothing running
  and how could I search my system to find an answer?
  ---
  PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
  To subscribe, unsubscribe, or to change your mail settings:
  http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
 

 
 ---
 PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
 To subscribe, unsubscribe, or to change your mail settings:
 http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

_
It’s the same Hotmail®. If by “same” you mean up to 70% faster.
http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_broad1_122008---
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss