[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: help /var is filling up!!!



I have two large files in my /var/log:

-rw-r--r--   1 root     root     18523020 May 24 07:14 lastlog <---------

-rw-r--r--   1 root     adm        871296 May 24 07:14 wtmp
-rw-r--r--   1 root     adm       7499904 May  5 14:07 wtmp.0  <---------
-rw-r--r--   1 root     adm         49369 Oct  1  1998 wtmp.1.gz
-rw-r--r--   1 root     adm         26365 Aug  1  1998 wtmp.2.gz
-rw-r--r--   1 root     adm         56427 Jun  9  1998 wtmp.3.gz
-rw-r--r--   1 root     adm         18072 Mar  1  1998 wtmp.4.gz
-rw-r--r--   1 root     adm           652 Feb  1  1998 wtmp.5.gz
-rw-r--r--   1 root     root       130944 Aug 21  1998 wtmp.libc5

It seems as if wtmp.0 is on its way to become wtmp.1.gz some time but what
about lastlog?  Is this normal?

I have tried to look at the contents of lastlog and it contains thousands
of ^@'s.



On 21 May 1999, Carl Johnson wrote:

> Bruno Boettcher <bboett@erm1.u-strasbg.fr> writes:
> 
> > > You really should find the real problem before you try changing
> > > logging.  Try something like the command 'find /var -xdev -size +5000k
> > > -print'.  This will print out the names of all files more than 5MB
> > > (there probably shouldn't be any).  Then look into the file and see if
> > right.... found another big file.. daemon 

> My /var/log directory is only a little over 2MB, but mine is mostly just a
> workstation for me.  Just for reference, I only have 5 files over 100KB, and
> the largest is only 300KB.

Johann

 --------------------------------------------------------------------------
| Johann Spies                                 Windsorlaan 19              |
| jhspies@futurenet.co.za                3201 Pietermaritzburg             |
| Tel/Faks Nr. +27 331-46-1310		       Suid-Afrika (South Africa)  |
 --------------------------------------------------------------------------

     "I will praise thee; for I am fearfully and wonderfully 
      made..."       Psalms 139:14 


Reply to: