On Fri, Oct 24, 2008 at 06:11:29PM +0300, Semih Gokalp enlightened us: > yes i did it before. > > du /var/log/message > > 28 /var/log/faillog > > but > > ls -al /var/log/ > > -rw------- 1 root root 137438953440 Oct 24 17:37 faillog > > but why it is different ? > It is what is called a "sparse file". Google should be able to tell you the details. Matt P.S. Please do not top post. -- Matt Hyclak Systems and Operations Office of Information Technology Ohio University (740) 593-1222 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20081024/01cb478a/attachment-0005.sig>