- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: System volume root's usage is 90% RN102
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
How can I secure my 102 now? So that it is not hacked. I use it only in my internal network
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
If your PCs all have antivirus already, you probably don't need to do anything.
You could run an Antivirus program on a PC that can scan the network shares on the NAS.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Thanks guys, good explanation. Worked for me.
Regards
Peter
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
after that I typt in: ssh root@ip-adress of the nas. I get shortly a black screen.
How should I go further
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Welcome to the Community!
I would suggest contacting NETGEAR Support if you are not comfortable proceeding on using SSH since it might cause you more issues if done incorrectly. However, if you have no problem of losing your data or if you have backup of your data a Factory reset can be done as another option to resolve this issue (full system volume).
Hope this helps!
Regards
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@AdMichels wrote:
after that I typt in: ssh root@ip-adress of the nas. I get shortly a black screen.
How should I go further
If you are dealing with the antivirus package filling the OS partition then you could follow the steps here: https://community.netgear.com/t5/Using-your-ReadyNAS-in-Business/System-volume-root-s-usage-is-90-RN...
Or contact paid support (my.netgear.com).
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Hello there,
I followed your instructions but I don't find any TMP folders. This is what i get:
root@ReeadyNas:/var/lib/clamav# ls -lsh
total 334M
4.0K -rw-r--r-- 1 root root 48 May 7 16:44 antivir.ini
992K -rw-r--r-- 1 root root 990K Jan 2 20:58 bytecode.cld
40M -rw-r--r-- 1 root root 40M May 7 16:38 daily.cvd
294M -rw-r--r-- 1 root root 294M Jun 24 2017 main.cld
4.0K -rw------- 1 root root 1.3K May 8 18:17 mirrors.dat
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@Janess wrote:
I followed your instructions but I don't find any TMP folders.
Then either the cause of your full root wasn't the antivirus software, or the root isn't full anymore.
Can you post the output of
# df // -h # df // -i
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Filesystem Size Used Avail Use% Mounted on
/dev/md0 4.0G 3.9G 0 100% /
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Filesystem Inodes IUsed IFree IUse% Mounted on
/dev/md0 65536 28204 37332 44% /
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@Janess wrote:
Filesystem Size Used Avail Use% Mounted on
/dev/md0 4.0G 3.9G 0 100% /
That says the root is certainly still full.
If you want to continue troubleshooting it yourself, you need to sort out where the space is going.
You begin by remounting the OS partition
# mount --bind / /mnt
The explore /mnt to see where the space goes.
cd /mnt du -d1 -h
It will tell you which is the biggest folder, then cd into it and re-run:
cd <big_folder> du -d1 -h
Once you find a folder that takes most of the space, post back and let us know what folder that is, and what stuff it has in it.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Hi Stephen,Thanks for your help!
This is what I get bij mnt:
root@ReadyNas:/mnt# du -d1 -h
4.0K ./sys
11M ./etc
8.0K ./media
4.0K ./boot
10M ./sbin
4.0K ./mnt
24K ./tmp
4.0K ./VOL1
3.1G ./var
4.0K ./run
4.0K ./proc
52K ./root
4.0K ./srv
4.0K ./selinux
12K ./dev
6.0M ./bin
30M ./frontview
16K ./apps
4.0K ./home
728M ./usr
16K ./lost+found
18M ./opt
28M ./lib
3.9G .
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Hi Stephen,
The VAR folder is the biggest.
root@ReadyNas:/var# du -d1 -h
8.0K ./www
30M ./cache
4.0K ./tmp
16K ./netatalk
4.0K ./agentx
26M ./cores
4.0K ./mail
4.0K ./local
140G ./ftp
2.1G ./log
24K ./spool
14M ./readynasd
4.0K ./opt
80M ./backups
882M ./lib
143G .
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@Janess wrote:
2.1G ./log
what's in here? There are subfolders, so you might need to probe a bit deeper.
FWIW, my main NAS has about 50 MB of stuff in this folder:
root@NAS:/var/log# du -d1 -h 0 ./news 100K ./apt 0 ./fsck 2.0M ./frontview 1.1M ./samba 3.2M ./apache2 2.5M ./readynasd 39M ./journal 0 ./clamav 0 ./audit 49M .
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
what command do I use to see what is in it?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
i'm learning a lott!
root@ReadyNas:/mnt/var/log# du -d1 -h
1.6M ./samba
4.0K ./fsck
4.0K ./mysql
1.5M ./apache2
74M ./squeezeboxserver
4.0K ./news
71M ./journal
448K ./freeradius
14M ./frontview
228K ./apt
2.4M ./readynasd
2.1G .
root@ReadyNas:/mnt/var/log# cd /mnt
root@ReadyNas:/mnt# cd */squeezeboxserver
root@NasJan:/mnt/etc/squeezeboxserver# du -d1 -h
32K .
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@Janess wrote:
root@ReadyNas:/mnt/var/log# du -d1 -h
1.6M ./samba
4.0K ./fsck
4.0K ./mysql
1.5M ./apache2
74M ./squeezeboxserver
4.0K ./news
71M ./journal
448K ./freeradius
14M ./frontview
228K ./apt
2.4M ./readynasd
2.1G .
The directories add up to about 165MB - not anywhere close to 2.1G. So there must be some big files in /mnt/var/log itself. Can you post
# ls /mnt/var/log -alhS
The S option will sort so the biggest files will be at the top.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Hello Stephen, It look syslog is the greatest.
-rw-r----- 1 root adm 1.9G May 21 16:45 syslog
-rw-r----- 1 root adm 18M May 21 16:41 messages
-rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log
-rw-r----- 1 root adm 2.0M May 21 15:26 debug
-rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp
-rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old
-rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old
-rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old
-rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old
-rw-r----- 1 root adm 701K May 21 16:39 auth.log
-rw-r----- 1 root adm 698K May 21 15:27 kern.log
-rw-r----- 1 root adm 549K May 21 16:41 user.log
-rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log
-rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old
-rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log
-rw-r----- 1 root root 16K Sep 23 2014 proftpd.log
-rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log
drwxr-xr-x 13 root root 4.0K Dec 21 03:53 .drwxr-xr-x 17 root root 4.0K May 7 02:25 ..
drwxr-xr-x 2 root root 4.0K Dec 11 2012 apache2
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Hello Stephen, It look syslog is the greatest.
-rw-r----- 1 root adm 1.9G May 21 16:45 syslog
-rw-r----- 1 root adm 18M May 21 16:41 messages
-rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log
-rw-r----- 1 root adm 2.0M May 21 15:26 debug
-rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp
-rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old
-rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old
-rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old
-rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old
-rw-r----- 1 root adm 701K May 21 16:39 auth.log
-rw-r----- 1 root adm 698K May 21 15:27 kern.log
-rw-r----- 1 root adm 549K May 21 16:41 user.log
-rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log
-rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old
-rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log
-rw-r----- 1 root root 16K Sep 23 2014 proftpd.log
-rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log
drwxr-xr-x 13 root root 4.0K Dec 21 03:53 .drwxr-xr-x 17 root root 4.0K May 7 02:25 ..
drwxr-xr-x 2 root root 4.0K Dec 11 2012 apache2
etc
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@Janess wrote:
Hello Stephen, It look syslog is the greatest.
-rw-r----- 1 root adm 1.9G May 21 16:45 syslog
And it shouldn't be there at all (it's not something a "stock" readynas would create). What apps do you have installed?
There are some others that aren't on my NAS - I've marked them in red below. The rest are all small though.
-rw-r----- 1 root adm 1.9G May 21 16:45 syslog -rw-r----- 1 root adm 18M May 21 16:41 messages -rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log -rw-r----- 1 root adm 2.0M May 21 15:26 debug -rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp -rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old -rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old -rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old -rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old -rw-r----- 1 root adm 701K May 21 16:39 auth.log -rw-r----- 1 root adm 698K May 21 15:27 kern.log -rw-r----- 1 root adm 549K May 21 16:41 user.log -rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log -rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old -rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log -rw-r----- 1 root root 16K Sep 23 2014 proftpd.log -rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log
You can recover the 1.9G of space by entering this
# echo > syslog
That will truncate syslog (bringing it down to 0 bytes). Though you still should uninstall the app that is creating it.
Even after this truncation, you still have a root partition that is about 50% full. Normally it's in the 25-30% range. We could look further, though getting down to 50% should make things safe for now.
BTW, when you are finished with /mnt, you unmount it by
# cd // # umount /mnt
The cd is because the umount will fail if you are in the /mnt folder/ Note the spelling "umount". It's easy to type "unmount".
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
@StephenB Many Thanks for your accurate and pro-active advise. I did DESTROY severall apps through the adm menu. The red warnings in the systemlogs are gone. I don't know what caused the problem. I like to look further. How can I clean it up more?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
It's basically the same process of sorting out where the space is going.
My top level looks like
6.4M ./bin 0 ./boot 24K ./dev 11M ./etc 0 ./home 33M ./lib 4.0K ./lib64 0 ./media 7.2M ./opt 0 ./proc 28K ./root 0 ./run 11M ./sbin 0 ./srv 0 ./sys 0 ./tmp 233M ./usr 615M ./var 0 ./mnt 0 ./data 0 ./apps 43M ./frontview 959M .
So both /usr and /var are quite a bit smaller than what you see.
root@NAS:/mnt/var# du -d1 -h 0 ./opt 93M ./backups 0 ./local 59M ./log 4.0K ./spool 0 ./mail 50M ./cache 386M ./lib 0 ./tmp 4.0K ./www 8.0K ./netatalk 17M ./cores 0 ./ftp 14M ./readynasd 615M .
root@NAS:/mnt/usr# du -d1 -h 4.0K ./local 26M ./sbin 0 ./src 40M ./share 34M ./bin 0 ./games 8.0K ./include 135M ./lib 233M .
There will be differences between systems - depending on apps (basically none in my case) and other configuration. 50% might well be ok for what you have running. For some years my Pro-6 was running at 50% (due to my installation of CrashPlan).
@Janess wrote:
I did DESTROY severall apps through the adm menu.
You mean you uninstalled them? What apps are still running?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
Dear @StephenB
I got the same issue on my RN214 about couple days ago, log shows;
Nov 07, 2023 08:00:30 | Volume: System volume root's usage is 86%. This condition should not occur under normal conditions. Contact technical support. |
I disabled AV and ssh to clean tmp files but it doesn't have these files and /var/log itself taking too much space, could you help?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: System volume root's usage is 90% RN102
root@UniNAS214:~# mount --bind / /mnt
root@UniNAS214:~# cd /mnt
root@UniNAS214:/mnt# du -d1 -h
4.0K ./sys
4.0K ./boot
12K ./dev
112K ./tmp
31M ./frontview
4.0K ./mnt
231M ./usr
4.0K ./data
8.8M ./etc
4.0K ./proc
16K ./lost+found
4.0K ./run
1.8G ./var
301M ./root
4.0K ./media
11M ./sbin
29M ./lib
798M ./opt
4.0K ./apps
4.0K ./home
4.0K ./srv
6.0M ./bin
3.2G .
root@UniNAS214:/mnt# cd /var
root@UniNAS214:/var# du -d1 -h
78M ./cores
159M ./cache
4.0K ./tmp
8.0K ./www
4.0K ./mail
94M ./backups
16K ./netatalk
1.1G ./log
4.0K ./local
9.5M ./readynasd
445M ./lib
4.0K ./opt
16K ./spool
4.0K ./ftp
1.8G .
root@UniNAS214:/var#
root@UniNAS214:~# cd /var/log
root@UniNAS214:/var/log# du -d1 -h
44K ./apt
76K ./frontview
57M ./journal
4.0K ./fsck
288K ./readynasd
973M ./apache2
648K ./samba
1.1G .
root@UniNAS214:/var/log# ls /mnt/var/log -alhS
total 200K
-rw-r--r-- 1 root root 286K Nov 7 18:39 lastlog
-rw-rw-r-- 1 root utmp 82K Nov 7 18:39 wtmp
-rw-r--r-- 1 root root 27K Nov 5 18:20 dpkg.log
-rw-r--r-- 1 root root 24K Nov 6 06:37 faillog
-rw-r----- 1 root root 8.1K Nov 5 19:09 proftpd.log
-rw------- 1 root root 6.2K Nov 7 19:55 tallylog
-rw------- 1 root utmp 4.2K Nov 5 16:17 btmp
drwxr-xr-x 9 root root 4.0K Sep 5 2022 .
drwxr-xr-x 16 root root 4.0K Jul 30 14:59 ..
drwxr-x--- 2 root adm 4.0K Aug 25 2018 apache2
drwxr-xr-x 2 root root 4.0K Aug 22 2022 apt
drwxr-xr-x 3 root root 4.0K Dec 11 2012 frontview
drwxr-xr-x 2 root root 4.0K Apr 30 2016 fsck
drwxr-sr-x+ 3 root systemd-journal 4.0K Feb 17 2023 journal
drwxr-xr-x 2 admin admin 4.0K Feb 19 2023 readynasd
drwxr-xr-x 2 root root 4.0K Oct 28 21:09 samba
root@UniNAS214:/var/log#