× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

Re: System volume root's usage is 90% RN102

dasgweg
Aspirant

Re: System volume root's usage is 90% RN102

How can I secure my 102 now? So that it is not hacked. I use it only in my internal network

Model: RN102|ReadyNAS 100 Series 2- Bay
Message 26 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102

If your PCs all have antivirus already, you probably don't need to do anything.

 

You could run an Antivirus program on a PC that can scan the network shares on the NAS.

Message 27 of 72
Peter-J-H
Tutor

Re: System volume root's usage is 90% RN102

Thanks guys, good explanation. Worked for me.

Regards

Peter

Message 28 of 72
AdMichels
Aspirant

Re: System volume root's usage is 90% RN102

after that I typt in: ssh root@ip-adress of the nas. I get shortly a black screen.

How should I go further

Model: RN10221D|ReadyNAS 100 Series 2- Bay (2x 1TB Desktop)
Message 29 of 72
Marc_V
NETGEAR Employee Retired

Re: System volume root's usage is 90% RN102

HI @JohnT123456 @AdMichels

 

Welcome to the Community!

 

I would suggest contacting NETGEAR Support if you are not comfortable proceeding on using SSH since it might cause you more issues if done incorrectly. However, if you have no problem of losing your data or if you have backup of your data a Factory reset can be done as another option to resolve this issue (full system volume).

 

Hope this helps!

 

Regards

Message 30 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@AdMichels wrote:

after that I typt in: ssh root@ip-adress of the nas. I get shortly a black screen.

How should I go further


If you are dealing with the antivirus package filling the OS partition then you could follow the steps here: https://community.netgear.com/t5/Using-your-ReadyNAS-in-Business/System-volume-root-s-usage-is-90-RN...

 

Or contact paid support (my.netgear.com).

Message 31 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

Hello there,

I followed your instructions but I don't find any TMP folders. This is what i get:

root@ReeadyNas:/var/lib/clamav# ls -lsh
total 334M
4.0K -rw-r--r-- 1 root root 48 May 7 16:44 antivir.ini
992K -rw-r--r-- 1 root root 990K Jan 2 20:58 bytecode.cld
40M -rw-r--r-- 1 root root 40M May 7 16:38 daily.cvd
294M -rw-r--r-- 1 root root 294M Jun 24 2017 main.cld
4.0K -rw------- 1 root root 1.3K May 8 18:17 mirrors.dat

 

Model: RN102|ReadyNAS 100 Series 2- Bay
Message 32 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@Janess wrote:

I followed your instructions but I don't find any TMP folders. 

 


Then either the cause of your full root wasn't the antivirus software, or the root isn't full anymore.

 

Can you post the output of

# df // -h
# df // -i

 

Message 33 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

Filesystem Size Used Avail Use% Mounted on
/dev/md0 4.0G 3.9G 0 100% /

 

 

Message 34 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

Filesystem Inodes IUsed IFree IUse% Mounted on
/dev/md0 65536 28204 37332 44% /

Model: A6150|AC1200 Dual Band WiFi USB Mini Adapter
Message 35 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@Janess wrote:

Filesystem Size Used Avail Use% Mounted on
/dev/md0 4.0G 3.9G 0 100% /


That says the root is certainly still full.

 

If you want to continue troubleshooting it yourself, you need to sort out where the space is going.

 

You begin by remounting the OS partition 

# mount --bind / /mnt

The explore /mnt to see where the space goes.

 

cd /mnt
du -d1 -h

It will tell you which is the biggest folder, then cd into it and re-run:

cd <big_folder>
du -d1 -h

Once you find a folder that takes most of the space, post back and let us know what folder that is, and what stuff it has in it.

 

Message 36 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

Hi Stephen,Thanks for your help!

This is what I get bij mnt:

root@ReadyNas:/mnt# du -d1 -h
4.0K ./sys
11M ./etc
8.0K ./media
4.0K ./boot
10M ./sbin
4.0K ./mnt
24K ./tmp
4.0K ./VOL1
3.1G ./var
4.0K ./run
4.0K ./proc
52K ./root
4.0K ./srv
4.0K ./selinux
12K ./dev
6.0M ./bin
30M ./frontview
16K ./apps
4.0K ./home
728M ./usr
16K ./lost+found
18M ./opt
28M ./lib
3.9G .

Message 37 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

Hi Stephen,

The VAR folder is the biggest.

root@ReadyNas:/var# du -d1 -h
8.0K ./www
30M ./cache
4.0K ./tmp
16K ./netatalk
4.0K ./agentx
26M ./cores
4.0K ./mail
4.0K ./local
140G ./ftp
2.1G ./log
24K ./spool
14M ./readynasd
4.0K ./opt
80M ./backups
882M ./lib
143G .

Message 38 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@Janess wrote:


2.1G ./log


what's in here?  There are subfolders, so you might need to probe a bit deeper.

 

FWIW, my main NAS has about 50 MB of stuff in this folder:

root@NAS:/var/log# du -d1 -h
0       ./news
100K    ./apt
0       ./fsck
2.0M    ./frontview
1.1M    ./samba
3.2M    ./apache2
2.5M    ./readynasd
39M     ./journal
0       ./clamav
0       ./audit
49M     .
Message 39 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

what command do I use to see what is in it?

Message 40 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

 

@StephenB 

i'm learning a lott!

 

root@ReadyNas:/mnt/var/log# du -d1 -h
1.6M ./samba
4.0K ./fsck
4.0K ./mysql
1.5M ./apache2
74M ./squeezeboxserver
4.0K ./news
71M ./journal
448K ./freeradius
14M ./frontview
228K ./apt
2.4M ./readynasd
2.1G .
root@ReadyNas:/mnt/var/log# cd /mnt
root@ReadyNas:/mnt# cd */squeezeboxserver
root@NasJan:/mnt/etc/squeezeboxserver# du -d1 -h
32K .

Message 41 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@Janess wrote:

 

root@ReadyNas:/mnt/var/log# du -d1 -h
1.6M ./samba
4.0K ./fsck
4.0K ./mysql
1.5M ./apache2
74M ./squeezeboxserver
4.0K ./news
71M ./journal
448K ./freeradius
14M ./frontview
228K ./apt
2.4M ./readynasd
2.1G .


The directories add up to about 165MB - not anywhere close to 2.1G.  So there must be some big files in /mnt/var/log itself.  Can you post 

# ls /mnt/var/log -alhS

The S option will sort so the biggest files will be at the top.

Message 42 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

@StephenB 

Hello Stephen, It look syslog is the greatest.

-rw-r----- 1 root adm 1.9G May 21 16:45 syslog

-rw-r----- 1 root adm 18M May 21 16:41 messages

-rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log

-rw-r----- 1 root adm 2.0M May 21 15:26 debug

-rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp

-rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old

-rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old

-rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old

-rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old

-rw-r----- 1 root adm 701K May 21 16:39 auth.log

-rw-r----- 1 root adm 698K May 21 15:27 kern.log

-rw-r----- 1 root adm 549K May 21 16:41 user.log

-rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log

-rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old

-rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log

-rw-r----- 1 root root 16K Sep 23 2014 proftpd.log

-rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log

drwxr-xr-x 13 root root 4.0K Dec 21 03:53 .drwxr-xr-x 17 root root 4.0K May 7 02:25 ..

drwxr-xr-x 2 root root 4.0K Dec 11 2012 apache2

Message 43 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

@StephenB 

Hello Stephen, It look syslog is the greatest.

-rw-r----- 1 root adm 1.9G May 21 16:45 syslog

-rw-r----- 1 root adm 18M May 21 16:41 messages

-rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log

-rw-r----- 1 root adm 2.0M May 21 15:26 debug

-rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp

-rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old

-rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old

-rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old

-rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old

-rw-r----- 1 root adm 701K May 21 16:39 auth.log

-rw-r----- 1 root adm 698K May 21 15:27 kern.log

-rw-r----- 1 root adm 549K May 21 16:41 user.log

-rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log

-rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old

-rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log

-rw-r----- 1 root root 16K Sep 23 2014 proftpd.log

-rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log

drwxr-xr-x 13 root root 4.0K Dec 21 03:53 .drwxr-xr-x 17 root root 4.0K May 7 02:25 ..

drwxr-xr-x 2 root root 4.0K Dec 11 2012 apache2

etc

Message 44 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102


@Janess wrote:

@StephenB 

Hello Stephen, It look syslog is the greatest.

-rw-r----- 1 root adm 1.9G May 21 16:45 syslog

 


And it shouldn't be there at all (it's not something a "stock" readynas would create).  What apps do you have installed?

 

There are some others that aren't on my NAS - I've marked them in red below.  The rest are all small though.

-rw-r----- 1 root adm 1.9G May 21 16:45 syslog
-rw-r----- 1 root adm 18M May 21 16:41 messages
-rw-r----- 1 root adm 6.4M May 21 16:45 daemon.log
-rw-r----- 1 root adm 2.0M May 21 15:26 debug
-rw-rw-r-- 1 root utmp 1.9M May 21 16:29 wtmp
-rw-r--r-- 1 root root 1.1M Mar 22 20:53 kern.log.old
-rw-r--r-- 1 root root 996K May 21 15:40 daemon.log.old
-rw-r--r-- 1 root root 934K Apr 19 12:17 user.log.old
-rw-r--r-- 1 root root 907K Aug 17 2018 auth.log.old
-rw-r----- 1 root adm 701K May 21 16:39 auth.log
-rw-r----- 1 root adm 698K May 21 15:27 kern.log
-rw-r----- 1 root adm 549K May 21 16:41 user.log
-rw-r--r-- 1 root root 525K May 7 16:54 dpkg.log
-rw-r--r-- 1 root root 426K Dec 3 2016 ctscand.log.old
-rw-r--r-- 1 root root 405K Sep 22 2014 netatalk.log
-rw-r----- 1 root root 16K Sep 23 2014 proftpd.log
-rw-r--r-- 1 root root 8.2K Feb 5 16:35 alternatives.log

 

You can recover the 1.9G of space by entering this

# echo > syslog

That will truncate syslog (bringing it down to 0 bytes).  Though you still should uninstall the app that is creating it.

 

Even after this truncation, you still have a root partition that is about 50% full.  Normally it's in the 25-30% range.  We could look further, though getting down to 50% should make things safe for now.

 

BTW, when you are finished with /mnt, you unmount it by

# cd //
# umount /mnt

The cd is because the umount will fail if you are in the /mnt folder/  Note the spelling "umount".  It's easy to type "unmount".

 

 

Message 45 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

@StephenB Many Thanks for your accurate and pro-active advise. I did DESTROY severall apps through the adm menu. The red warnings in the systemlogs are gone. I don't know what caused the problem. I like to look further. How can I clean it up more?

Message 46 of 72
StephenB
Guru

Re: System volume root's usage is 90% RN102

It's basically the same process of sorting out where the space is going.

 

My top level looks like

6.4M    ./bin
0       ./boot
24K     ./dev
11M     ./etc
0       ./home
33M     ./lib
4.0K    ./lib64
0       ./media
7.2M    ./opt
0       ./proc
28K     ./root
0       ./run
11M     ./sbin
0       ./srv
0       ./sys
0       ./tmp
233M    ./usr
615M    ./var
0       ./mnt
0       ./data
0       ./apps
43M     ./frontview
959M    .

So both /usr and /var are quite a bit smaller than what you see.

root@NAS:/mnt/var# du -d1 -h
0       ./opt
93M     ./backups
0       ./local
59M     ./log
4.0K    ./spool
0       ./mail
50M     ./cache
386M    ./lib
0       ./tmp
4.0K    ./www
8.0K    ./netatalk
17M     ./cores
0       ./ftp
14M     ./readynasd
615M    .
root@NAS:/mnt/usr# du -d1 -h
4.0K    ./local
26M     ./sbin
0       ./src
40M     ./share
34M     ./bin
0       ./games
8.0K    ./include
135M    ./lib
233M    .

There will be differences between systems - depending on apps (basically none in my case) and other configuration.  50% might well be ok for what you have running.  For some years my Pro-6 was running at 50% (due to my installation of CrashPlan).

 


@Janess wrote:

I did DESTROY severall apps through the adm menu.

You mean you uninstalled them?  What apps are still running?

Message 47 of 72
Janess
Aspirant

Re: System volume root's usage is 90% RN102

@StephenB yes, I think I uninstalled them. No apps are running. I new installed SMB plus but that doesn't work to good.

 

Message 48 of 72
Leventh
Apprentice

Re: System volume root's usage is 90% RN102

Dear @StephenB 

I got the same issue on my RN214 about couple days ago, log shows; 

Nov 07, 2023 08:00:30
 
Volume: System volume root's usage is 86%. This condition should not occur under normal conditions. Contact technical support.

I disabled AV and ssh to clean tmp files but it doesn't have these files and /var/log itself taking too much space, could you help?

Message 49 of 72
Leventh
Apprentice

Re: System volume root's usage is 90% RN102

root@UniNAS214:~# mount --bind / /mnt

root@UniNAS214:~# cd /mnt

root@UniNAS214:/mnt# du -d1 -h

4.0K ./sys

4.0K ./boot

12K ./dev

112K ./tmp

31M ./frontview

4.0K ./mnt

231M ./usr

4.0K ./data

8.8M ./etc

4.0K ./proc

16K ./lost+found

4.0K ./run

1.8G ./var

301M ./root

4.0K ./media

11M ./sbin

29M ./lib

798M ./opt

4.0K ./apps

4.0K ./home

4.0K ./srv

6.0M ./bin

3.2G .

root@UniNAS214:/mnt# cd /var

root@UniNAS214:/var# du -d1 -h

78M ./cores

159M ./cache

4.0K ./tmp

8.0K ./www

4.0K ./mail

94M ./backups

16K ./netatalk

1.1G ./log

4.0K ./local

9.5M ./readynasd

445M ./lib

4.0K ./opt

16K ./spool

4.0K ./ftp

1.8G .

root@UniNAS214:/var#

 

 

root@UniNAS214:~# cd /var/log

root@UniNAS214:/var/log# du -d1 -h

44K ./apt

76K ./frontview

57M ./journal

4.0K ./fsck

288K ./readynasd

973M ./apache2

648K ./samba

1.1G .

root@UniNAS214:/var/log# ls /mnt/var/log -alhS

total 200K

-rw-r--r--   1 root  root            286K Nov  7 18:39 lastlog

-rw-rw-r--   1 root  utmp             82K Nov  7 18:39 wtmp

-rw-r--r--   1 root  root             27K Nov  5 18:20 dpkg.log

-rw-r--r--   1 root  root             24K Nov  6 06:37 faillog

-rw-r-----   1 root  root            8.1K Nov  5 19:09 proftpd.log

-rw-------   1 root  root            6.2K Nov  7 19:55 tallylog

-rw-------   1 root  utmp            4.2K Nov  5 16:17 btmp

drwxr-xr-x   9 root  root            4.0K Sep  5  2022 .

drwxr-xr-x  16 root  root            4.0K Jul 30 14:59 ..

drwxr-x---   2 root  adm             4.0K Aug 25  2018 apache2

drwxr-xr-x   2 root  root            4.0K Aug 22  2022 apt

drwxr-xr-x   3 root  root            4.0K Dec 11  2012 frontview

drwxr-xr-x   2 root  root            4.0K Apr 30  2016 fsck

drwxr-sr-x+  3 root  systemd-journal 4.0K Feb 17  2023 journal

drwxr-xr-x   2 admin admin           4.0K Feb 19  2023 readynasd

drwxr-xr-x   2 root  root            4.0K Oct 28 21:09 samba

root@UniNAS214:/var/log#

Message 50 of 72
Top Contributors
Discussion stats
  • 71 replies
  • 16169 views
  • 14 kudos
  • 15 in conversation
Announcements