Root directory full after crash

[atul2701]

Hi Pls provide the output of below commnd

find / -xdev -size +10000 -exec ls -alrt {} \; | sort -rn

Atul

[rariasn]

Hi,

find / -xdev -type f -exec ll {} \; | awk '
{ printf "%9d %3s %2d %5s %s\n" , $5, $6 , $7, $8, $9 }'|sort -r -n|more

rgs

[Martin Talero]

CD and SD_CDROM directories where I mounted DVS before but now don't have nothing, only directories.

There are the result of commands:

SARC #find / -xdev -size +10000 -exec ls -alrt {} \; | sort -rn
-r-xr-xr-x 1 bin bin 16292880 Jun 13 2008 /etc/opt/resmon/lib/libxerces-c.so.23

SARC #find / -xdev -type f -exec ll {} \; | awk '
> { printf "%9d %3s %2d %5s %s\n" , $5, $6 , $7, $8, $9 }'|sort -r -n|more
16292880 Jun 13 2008 /etc/opt/resmon/lib/libxerces-c.so.23
4619600 Jun 13 2008 /etc/opt/resmon/lib/hpux64/libEMSHAProvider.so.1
4086524 Jun 13 2008 /etc/opt/resmon/lbin/mibmond
3428840 Jan 12 2007 /sbin/fs/vxfs/fsck
3336976 Jul 7 2008 /sbin/lvmcmd
3186716 Jan 12 2007 /sbin/fs/vxfs/fsck_logv9
3132340 Jul 7 2008 /sbin/lvmpcmd
2894224 Dec 14 2007 /sbin/fs/vxfs/mkfs
2823560 Jan 12 2007 /sbin/fs/vxfs/mount
2747356 Jan 12 2007 /sbin/fs/vxfs/extendfs
2673060 Jan 12 2007 /sbin/fs/vxfs/vxumount
2670972 Jan 12 2007 /sbin/fs/vxfs/vxenablef
2395404 Feb 15 2007 /sbin/kcboot
2384592 Feb 15 2007 /sbin/kcshutdown
1969596 Feb 15 2007 /sbin/init
1853656 Jul 7 2008 /sbin/lvm_wrapper
1708224 Jan 18 11:10 /.mozilla/firefox/cj1392w9.default/XPC.mfasl
1680264 Feb 15 2007 /sbin/fs/fsdaemon
1403704 Jun 18 2008 /sbin/sh
1280564 Jun 28 2008 /sbin/rmsf
1280564 Jun 28 2008 /sbin/mksf
1280564 Jun 28 2008 /sbin/lssf
1280564 Jun 28 2008 /sbin/insf
1246216 Feb 15 2007 /sbin/awk
1221300 May 23 2008 /sbin/pax
1140552 Jan 12 2007 /sbin/fs/vxfs/unsupported/metasave
1133808 Jun 28 2008 /sbin/ioscan
1112380 Jan 12 2007 /sbin/vxdump
1097776 Jan 12 2007 /sbin/fs/vxfs/fsdb
1092940 Jan 12 2007 /sbin/fs/vxfs/vxfsconvert
1027608 Feb 15 2007 /sbin/savecrash
1026272 May 15 2008 /sbin/frecover
971720 Jan 12 2007 /sbin/vxrestore
951132 Feb 15 2007 /sbin/dasetup
935276 Jun 28 2008 /sbin/ioinit

Thanks again.

[R.O.]

Hi,

Maybe a file under "/" was removed or renamed while it was being accesed by a process. In such cases, the space in the file system is not released until the process dies. To find it (if it is the case) try with:

# lsof +aL1 /

It will shows files deleted by still opened by the system.

Regards,

[Martin Talero]

Hi,
Do you know where can I download the lsof for hp-ux 11.31?

[Robert-Jan Goossens]

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/lsof-4.83/

[TwoProc]

Look for a large file that happened on the day you crashed, or just before. This would eliminate a lot of the valid files you have in the binary areas that are valid, and not changed since 2007.

Let's say you crashed yesterday:

find / -type f -xdev -mtime -1 \
-size +10000 -exec ls -al {} \;

or you crashed today:
find / -type f -xdev -mtime 0 \
-size +10000 -exec ls -al {} \;

To narrow and expand the list, just play with the size number (removing/adding zeroes) and the =-mtime argument until you see the file you're looking for.