NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
JohnT123456
Mar 19, 2019Aspirant
System volume root's usage is 90% RN102
Please can someone help, I am a total novice with these things. I have read some of the post about the same issue, it talks of SSH mumbo jumbo...lol. I have switched SSH on in the admin GUI so shoul...
- Mar 19, 2019
Be careful here, as there are support implications in trying to fix this yourself. Typing the wrong thing can do damage, and require you to do a factory default to recover. So I recommend backing up the NAS first. https://kb.netgear.com/30068/ReadyNAS-OS-6-SSH-access-support-and-configuration-guides
You first disable the AntiVirus service - which it sounds like you have already done.
The second step is to enable SSH in the NAS web ui in system->settings. If your password is still set to password, you also need to change it to something else.
Now you need a program to connect to the NAS using SSH. Windows 10 has a program built in (called ssh). So do Macs (terminal). For other windows versions you need to install putty from https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html (and you can also use putty on Windows 10 if you like).
Then you use that program to connect to the NAS:
- ssh root@nas-ip-address on Windows 10 (entered on the Windows 10 search bar)
- launch terminal, enter ssh root@nas-ip-address on the mac
- launch putty, make sure ssh is selected as the connection type. Enter the nas-ip-address and click open. Enter root as the username.
Use the real NAS IP address of course. It's important to log in as root. Don't log in as admin. When you see the password prompt, enter the NAS admin password (root and admin use the same password).
If you have trouble launching one of these programs, then you can post back (or just google for more info).
Be careful on the typing of the commands below. Be sure to use the correct slash direction, etc.
After you are logged in, you enter
cd /var/lib/clamav ls -lsh
You should now see a folder listing, with some folders that look like clamav-<very long string>.tmp
If you don't see these tmp folders, then post back and tell us what you do see.
If you do see these tmp folders, then you remove them by entering
rm -r clamav-*.tmp ls -lsh
You should now see a second folder listing, and those tmp folders should be gone.
asimb has posted a screen shot illustrating these commands: https://community.netgear.com/t5/Using-your-ReadyNAS-in-Business/System-volume-root-s-usage-is-xx-This-condition-should-not-occur/m-p/1722860#M178464
I'm taking the liberty of re-posting that screen shot here.
I recommend leaving the AntiVirus service off - at least for now.
Bernard46
Dec 31, 2023Aspirant
I've suddenly started getting similar messages to others mentioned in this series of posts. Unfortunately I'm completely ignorant when it comes to Unix commands so I really don't know what to do - I have followed the earlier instructions but now I'm stuck. Antivirus has been switched off on my NAS 102 (running 6.10.2) for some time, possibly over a year. The only app on the device is Resilio Sync and that has never been used.
The log for today shows the following messages:-
31 Dec 2023 12:30:04 | System: Service protocol SSH is enabled. | |
31 Dec 2023 08:00:14 | Volume: System volume root's usage is 84%. This condition should not occur under normal conditions. Contact technical support. | |
31 Dec 2023 00:35:47 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN Videos. | |
31 Dec 2023 00:35:36 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN readydrop. | |
31 Dec 2023 00:35:34 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN Pictures. | |
31 Dec 2023 00:35:31 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN Music. | |
31 Dec 2023 00:35:29 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN JillsEdge. | |
31 Dec 2023 00:35:22 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN HOME-XPS-Documents. | |
31 Dec 2023 00:35:18 | Snapshot: Snapshot prune worker successfully deleted snapshot 2023_12_03__00_00_00 from share or LUN Documents. | |
31 Dec 2023 00:00:38 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN Videos. | |
31 Dec 2023 00:00:37 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN readydrop. | |
31 Dec 2023 00:00:35 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN Pictures. | |
31 Dec 2023 00:00:33 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN Music. | |
31 Dec 2023 00:00:31 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN JillsEdge. | |
31 Dec 2023 00:00:27 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN HOME-XPS-Documents. | |
31 Dec 2023 00:00:26 | Snapshot: Snapshot c_1703980822 was successfully created for share or LUN Documents. |
I've enabled SSH and run the SSH command and entered a few of the commands mentioned in earlier posts - the results are above. The log messages says the ROOT directory is 84% full (and climbing by 1% every 2 or 3 days) - the df command seems to say a directory (md0 ?) is 89% full, but I'm not sure these are talking about the same thing - probably not.
Please can someone shed some light on what is happening with this system and what I should do to resolve what looks like a serious problem looming?
Bernard
- StephenBDec 31, 2023Guru - Experienced User
Bernard46 wrote:
The log for today shows the following messages:-
The log messages says the ROOT directory is 84% full (and climbing by 1% every 2 or 3 days) - the df command seems to say a directory (md0 ?) is 89% full, but I'm not sure these are talking about the same thing - probably not.Actually it is the same. md0 is the RAID array (virtual disk) for the OS partition (e.g., the root).
Bernard46 wrote:
Please can someone shed some light on what is happening with this system and what I should do to resolve what looks like a serious problem looming?
It'd be prudent to back up the data on the NAS right away. A full root can result in a bricked NAS or damaged configuration files.
Once that is done, you have the option to do a factory default (which reformat the disks and does a clean install). Then reconfigure the NAS and restore the files from backup. That would completely resolve the issue.
The other option is to try to find the file(s) that are causing the problem, and then delete them. That can take some time, and of course you do have to be cautious when deleting things.
If you want to look more closely, the best starting point is to remount the root as /mnt. The reason is that there are other mount points on the root that appear to be part of the root partition, but really are folders on the data volume. Exploring /mnt eliminates that problem. This command will do that:
mount --bind / /mnt
Then enter
du -csh /mnt/*
That will give you the data stored in each in each subfolder, and give you a clue where the space is going.
You should see space usage similar to this:
root@RN102:~# mount --bind / /mnt root@RN102:~# du -csh /mnt/* 4.0K /mnt/apps 5.7M /mnt/bin 4.0K /mnt/boot 4.0K /mnt/data 12K /mnt/dev 9.4M /mnt/etc 31M /mnt/frontview 0 /mnt/ftp_ban.tbl 4.0K /mnt/home 0 /mnt/homes 30M /mnt/lib 16K /mnt/lost+found 56K /mnt/media 4.0K /mnt/mnt 16M /mnt/opt 4.0K /mnt/proc 36K /mnt/root 4.0K /mnt/run 11M /mnt/sbin 12K /mnt/share_lun_ui_fix.sh 4.0K /mnt/srv 4.0K /mnt/sys 24K /mnt/tmp 269M /mnt/usr 446M /mnt/var 815M total root@RN102:~#
Likely you'll see a folder on your NAS that has a lot more space than these. You can then explore that further by adding the folder to the command. For instance, this will look deeper into var:
root@RN102:~# du -csh /mnt/var/* 102M /mnt/var/backups 85M /mnt/var/cache 4.0K /mnt/var/cores 4.0K /mnt/var/ftp 260M /mnt/var/lib 4.0K /mnt/var/local 0 /mnt/var/lock 60M /mnt/var/log 4.0K /mnt/var/mail 16K /mnt/var/netatalk 4.0K /mnt/var/opt 13M /mnt/var/readynasd 0 /mnt/var/run 16K /mnt/var/spool 4.0K /mnt/var/tmp 8.0K /mnt/var/www 518M total root@RN102:~#
Once you find the problem folder(s), you can list them with ls, and then post the details here. Then we can give you some further advice on what to do.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!