NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
System volume 'root' usage is 81 %
ReadyNAS 314
4 2TB WD Reds
6.2.2
About a week ago started getting the warning message about root usage above 80%.
I'm a Windows (and MS-DOS) guy and don't know enough to puzzle this one through myself . . . So I can use a little help.
Here is what I've found poking around:
The app linux-dash confirms that the root is above 80%.
Using shell-in-a-box to poke around I see:
Digging deeper into /var/ftp 'cause that appears to be a particularly large directory I see:
The contents of /var/ftp look to be copies of stuff I've moved to the NAS from other computers on my LAN using FileZilla on those computers.
So two questions:
Is it OK to delete all these files -- as they are duplicates?
Why are these here?
Thanks in advance!
4 2TB WD Reds
6.2.2
About a week ago started getting the warning message about root usage above 80%.
I'm a Windows (and MS-DOS) guy and don't know enough to puzzle this one through myself . . . So I can use a little help.
Here is what I've found poking around:
The app linux-dash confirms that the root is above 80%.
Using shell-in-a-box to poke around I see:
root@siocl0ud:/# du -hxm --max-depth=1 / | sort -h
0 /apps
0 /boot
0 /dev
0 /home
0 /media
0 /mnt
0 /proc
0 /run
0 /selinux
0 /srv
0 /sys
1 /data
1 /lib64
1 /root
1 /tmp
7 /bin
7 /etc
9 /sbin
22 /frontview
36 /lib
122 /opt
428 /usr
1206 /var
1833 /
Digging deeper into /var/ftp 'cause that appears to be a particularly large directory I see:
root@siocl0ud:/var/ftp# du
. . . . (snipped lots)
1212533642 ./USB_HDD_1
2102231909
The contents of /var/ftp look to be copies of stuff I've moved to the NAS from other computers on my LAN using FileZilla on those computers.
So two questions:
Is it OK to delete all these files -- as they are duplicates?
Why are these here?
Thanks in advance!
4 Replies
Replies have been turned off for this discussion
# df -h
# du -csh /var/*
# cat /proc/mounts- Thank you mdgm!
Here is the output:root@xxxxxx:~# df -h
Filesystem Size Used Avail Use% Mounted on
rootfs 4.0G 3.0G 728M 81% /
tmpfs 10M 4.0K 10M 1% /dev
/dev/md0 4.0G 3.0G 728M 81% /
tmpfs 996M 48K 996M 1% /dev/shm
tmpfs 996M 7.1M 989M 1% /run
tmpfs 996M 0 996M 0% /sys/fs/cgroup
tmpfs 996M 24K 996M 1% /media
/dev/md127 5.5T 2.1T 3.4T 39% /data
/dev/md127 5.5T 2.1T 3.4T 39% /home
/dev/md127 5.5T 2.1T 3.4T 39% /apps
/dev/md127 5.5T 2.1T 3.4T 39% /var/ftp/a_Seed_Photos
/dev/md127 5.5T 2.1T 3.4T 39% /run/nfs4/home
/dev/sde1 1.9T 842G 1022G 46% /media/ESATA_HDD_1
/dev/sde1 1.9T 842G 1022G 46% /var/ftp/ESATA_HDD_1
/dev/sde1 1.9T 842G 1022G 46% /run/nfs4/media/ESATA_HDD_1
/dev/sdf1 2.8T 1.2T 1.6T 42% /media/USB_HDD_1
/dev/sdf1 2.8T 1.2T 1.6T 42% /var/ftp/USB_HDD_1
/dev/sdf1 2.8T 1.2T 1.6T 42% /run/nfs4/media/USB_HDD_1root@xxxxxx:~# du -csh /var/*
0 /var/agentx
59M /var/backups
107M /var/cache
41M /var/cores
2.0T /var/ftp
577M /var/lib
0 /var/local
4.0K /var/lock
428M /var/log
0 /var/mail
8.0K /var/netatalk
0 /var/opt
16K /var/readydrop
732K /var/readynasd
4.0K /var/run
8.0K /var/spool
0 /var/tmp
4.0K /var/www
2.0T totalroot@xxxxxx:~# cat /proc/mounts
rootfs / rootfs rw 0 0
tmpfs /dev tmpfs rw,noatime,nodiratime,size=10240k,mode=755 0 0
devpts /dev/pts devpts rw,noatime,nodiratime,mode=600 0 0
/dev/md0 / btrfs rw,noatime,nodiratime,nospace_cache 0 0
proc /proc proc rw,nosuid,nodev,noexec,noatime,nodiratime 0 0
sysfs /sys sysfs rw,nosuid,nodev,noexec,noatime,nodiratime 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
tmpfs /run tmpfs rw,nosuid,nodev,mode=755 0 0
tmpfs /sys/fs/cgroup tmpfs rw,nosuid,nodev,noexec,mode=755 0 0
cgroup /sys/fs/cgroup/systemd cgroup rw,nosuid,nodev,noexec,noatime,nodiratime,release_agent=/lib/systemd/systemd-cgroups-agent,name=s
ystemd 0 0
cgroup /sys/fs/cgroup/cpu cgroup rw,nosuid,nodev,noexec,noatime,nodiratime,cpu 0 0
cgroup /sys/fs/cgroup/blkio cgroup rw,nosuid,nodev,noexec,noatime,nodiratime,blkio 0 0
systemd-1 /proc/sys/fs/binfmt_misc autofs rw,noatime,nodiratime,fd=25,pgrp=1,timeout=300,minproto=5,maxproto=5,direct 0 0
debugfs /sys/kernel/debug debugfs rw,noatime,nodiratime 0 0
tmpfs /media tmpfs rw,nosuid,nodev,noexec,noatime,nodiratime,mode=755 0 0
fusectl /sys/fs/fuse/connections fusectl rw,noatime,nodiratime 0 0
configfs /sys/kernel/config configfs rw,noatime,nodiratime 0 0
/dev/md127 /data btrfs rw,noatime,nodiratime,nospace_cache 0 0
/dev/md127 /home btrfs rw,noatime,nodiratime,nospace_cache 0 0
/dev/md127 /apps btrfs rw,noatime,nodiratime,nospace_cache 0 0
/dev/md127 /var/ftp/a_Seed_Photos btrfs rw,noatime,nodiratime,nospace_cache 0 0
/dev/md127 /run/nfs4/home btrfs rw,noatime,nodiratime,nospace_cache 0 0
/dev/sde1 /media/ESATA_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
/dev/sde1 /var/ftp/ESATA_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
/dev/sde1 /run/nfs4/media/ESATA_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
/dev/sdf1 /media/USB_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
/dev/sdf1 /var/ftp/USB_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
/dev/sdf1 /run/nfs4/media/USB_HDD_1 ufsd rw,noatime,nodiratime,nls=utf8,fmask=0,dmask=0 0 0
Note that USB_HDD_1 is a WD 3TB; ESATA_HDD_1 is a 2TB WD Black in an enclosure.
Hans - /var/ftp is not the problem.
/var/log might have some huge log files in it for instance. - Also ran into these symptoms just a couple of days ago. First thing I did, was to identify the large files in rootfs. So did a find on large size files and excluded /data and /apps (dirs not part of rootfs), leaving the find to only touch upon the rootfs, mostly. There are probably better and other ways to do this (like the du -csh /var/* above), but this helped me isolate the large files:
find / -not -path "*/data/*" -not -path "*/apps/*" -size +100000k -print0 | xargs -0 ls -sd | sort -nr
Based on the results below, I found that 3rd party apps were storing a lot of data in MySQL's /var/lib/mysql/ibdata1. And another app was writing a lot to /var/log/syslog, as indicated by mdgm above.
find: `/proc/6993/task/6993/fd/5': No such file or directory
find: `/proc/6993/task/6993/fdinfo/5': No such file or directory
find: `/proc/6993/fd/5': No such file or directory
find: `/proc/6993/fdinfo/5': No such file or directory
706M /var/lib/mysql/ibdata1
124M /var/log/syslog
...
Together, these two large files alone accounted for about 830/4096 = 20% of rootfs, causing the message "System volume 'root' usage is 81%".
The result from the commands, suggested by mdgm, that you used above, seem to point in the same direction.du -csh /var/*
577M /var/lib
0 /var/local
4.0K /var/lock
428M /var/log
Are you by any change running LogAnalyzer (or ran it in the past)?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
