Skip to main content
15 events
when toggle format what by license comment
May 23, 2017 at 12:33 history edited kjo CC BY-SA 3.0
added 32 characters in body
May 22, 2017 at 21:19 vote accept kjo
May 22, 2017 at 19:59 answer added Rui F Ribeiro timeline score: 10
May 22, 2017 at 19:47 comment added kjo @RuiFRibeiro: Thanks again. Your idea lead me to the culprit process. I killed it, and now, both df and du show 487G (out of 880G). If you post your comment as an answer, I'll accept it.
May 22, 2017 at 19:37 comment added kjo @RuiFRibeiro: bingo, that command output ~800 lines. The entry in the COMMAND in most of the lines is server. A server process also shows up in iotop. I'll investigate further... Thanks!
May 22, 2017 at 19:29 comment added Rui F Ribeiro deleted files only disappear after the process is stopped; they remain in use while that does not happen. what does it say? sudo lsof -nP | grep '(deleted)'
May 22, 2017 at 19:27 comment added kjo @RuiFRibeiro: OK, I restarted syslog, but I see no difference in du's output, nor in the size of /var.
May 22, 2017 at 19:21 answer added mehlj timeline score: 2
May 22, 2017 at 19:21 comment added kjo @RuiFRibeiro: a deleted file that is growing?
May 22, 2017 at 19:21 comment added kjo @RuiFRibeiro: sorry, I don't understand your point.
May 22, 2017 at 19:20 comment added Rui F Ribeiro You dealing with a deleted file, that is why du does not register it. The /var size, if syslog is the culprit, wont register it too.
May 22, 2017 at 19:19 comment added kjo @RuiFRibeiro: FWIW, /var is tiny (3.1G), and doesn't seem to be growing particularly fast.
May 22, 2017 at 19:16 comment added kjo @RuiFRibeiro: thanks for the idea... I've never restarted syslog, need to look into that...
May 22, 2017 at 19:15 comment added Rui F Ribeiro What happens if you restart syslog?
May 22, 2017 at 19:12 history asked kjo CC BY-SA 3.0