[CentOS] What is writing to my filesystem

Thu Apr 9 23:15:23 UTC 2009
Robert Heller <heller at deepsoft.com>

At Thu, 9 Apr 2009 18:51:42 -0400 CentOS mailing list <centos at centos.org> wrote:

> I have a CentOS 5.2 box that every few months runs out of drivespace on
> its root filesystem. Last time I manually searched and deleted some big
> files, but don't remember what they were or what wrote to them. The
> applications I'm aware of on the box don't write to /. 

You have /var and/or /tmp on separate filesystems?  If not, that is
where things are being written to.  Specificly, look in /tmp,
/var/log/, and under /var/spool.  Is /var/tmp separate from /tmp?  What
about /usr/tmp?  If you don't run the machine 24/7, logrotate might not
be run, this would mean your log files (under /var/log) will grow and
grow and grow ...  If you don't have an email alias for root (I assume
you don't login as root!), then /var/spool/mail/root will grow and grow
and grow ... as well (all sorts of silly messages sent to root).  It is
also possible that stuff is accumulating under /var/spool/lpd as well,
although this will be small files.

> Is there a way to find the files that get written to the most, or grow
> the most over time? Doing a df gives me a snapshot, but it seems clunky
> to keep track of the diff on that output over time. I can then see what
> processes write to them. Any other ideas on how to investigate this are
> welcome.
> Thanks much.
> Jorge 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

Robert Heller             -- 978-544-6933
Deepwoods Software        -- Download the Model Railroad System
http://www.deepsoft.com/  -- Binaries for Linux and MS-Windows
heller at deepsoft.com       -- http://www.deepsoft.com/ModelRailroadSystem/