topic Re: Root partition in Operating System - HP-UX

Root partition

Madhava Rao Lakkaniki — Wed, 20 Dec 2006 10:34:15 GMT

Hi all,

Root partition suddenly increased to 8% growth yesterday. How to find out the new files are added in yesterday in root partition for removal.

Thanks,

Rao

Re: Root partition

Michael Steele_2 — Wed, 20 Dec 2006 10:39:15 GMT

Dear Rao:

Can you elaborate on '...root partition...'?

a) lvm or vxvm?

b) how are you defining partition? rootdg? vg00? lvol3? / (root) file system?

If file system / (root) then use 'du -k | sort -rn | more'

-or-

# find /dev -type f (* there should only be device files in /dev*)

-or-

# quot / (* list of owners, not very helpful but sometimes useful *)

Re: Root partition

Coolmar — Wed, 20 Dec 2006 10:42:41 GMT

There are a few things you can do:

1. Print out files that have been modified/added in the past 24 hours
# find / -mtime -1 -print

2. Print all files that are over a certain size - example is 2MB
# find / -size +2000000c

3. I have attached a script that I got on this forum that I use all the time for this sort of thing. It will give you the top 20 directories and the sizes...our root partition went to 100% yesterday and this script showed me right away where the problem was.

Re: Root partition

Coolmar — Wed, 20 Dec 2006 10:43:06 GMT

Re: Root partition

Peter Godron — Wed, 20 Dec 2006 10:47:54 GMT

Hi Rao,
how about:
#create a temp file with a creation date of 24 hours ago (see man touch)
#touch -mt 200612190000 /tmp/myref
# find /path -xdev -type f -newer /tmp/myref
or
find / -mtime 1

Re: Root partition

spex — Wed, 20 Dec 2006 10:50:43 GMT

Hi Rao,

As has been mentioned many times in the past, UNIX has no notion of creation time of a file. A file's mtime (last modified time) serves as a pseudo-creation time, as long as the file hasn't been modified since it was created.

To make sure you get all of yesterday, and just yesterday, create two reference files and use find's '-newer' primary.

$ touch -t 12190000 /tmp/ref1
$ touch -t 12200000 /tmp/ref2
$ find / -xdev -type f \( -newer /tmp/ref1 -a ! -newer /tmp/ref2)
$ rm /tmp/ref[12]

PCS

Re: Root partition

Madhava Rao Lakkaniki — Wed, 20 Dec 2006 11:25:33 GMT

Thanks for all of you .

I appreciate everyone with promt response. I found the file which has grown (rc.log) too much.

Regards

Rao

Re: Root partition

George Liu_4 — Wed, 20 Dec 2006 14:06:17 GMT

Then you probably need to look into the rc.log to seee what caused that

Re: Root partition

MarkSyder — Thu, 21 Dec 2006 03:20:13 GMT

rc.log is usually only updated on reboot. Have you rebooted in the last couple of days? Is the file unusually large? If so, I would look for errors or warnings in it.

Mark Syder (like the drink but spelt different)