i can see a lot of files like /var/tmp/caaa... what is this file

[Ela]

Hi

i can see that i lot of files are created on /var/tmp/caaa121212 , i know that i can delete this files but i m getting a lot of this files .

i want to know what is causing this files creating and how can i stop it

[Tomek Gryszkiewicz]

What is the owner of this files?
What is inside it?

-Tomek

[Ravi_8]

Hi,

some temporory files will be created during some processing and will be kept under /var/tmp and /tmp which doesn't cause any harm. You can close your eyes and remove

[Ela]

Hi

i have all ready wrote a script that is deleting this files with crontab but ..

i want to know who is creating it and i can see that in one system it is creating every min. so i have 1000's of files .

in the files i can see this line :
ifconfig: no such interface

-rw-r--r-- 1 root sys 28 Oct 10 10:55 caaa07538

[Brian Bergstrand]

You can try running fuser on each file, to see the process that has it open. 99% of the time this will also be the process that created the file. Problem is, you have to catch the file when it is open, which could be a very short window. To get around this, you may want to use lsof looping in a script and logging the output. You can then grep the log for the file names and find out what process created the file.

Lsof can be found here:
http://hpux.connect.org.uk/hppd/hpux/Sysadmin/lsof-4.67/

HTH.

[Robert-Jan Goossens]

Hi,

believe these files are created at boot time, checking lan interfaces.

Regards,
Robert-Jan.

[Brian Bergstrand]

From the output, it looks like something is trying to modify lan1. Do you maybe have routed/gated running and it is configured wrong, or getting bad route info from the network?

[Ela]

Hi

well i have check all the thing that you told me but this is not the issue .

fuser is not good because the file is created and you can see whick process is doing it , also lsof will not help because i cant see this file open .

also a good idea who is creating this file will be good becuase i will run tusc on this process to see

[Brian Bergstrand]

Ela,

That's the problem with these transient temp files, they are only open for a very short time period. LSOF will catch this, but I think you will have to run it in a continuous loop from a script over a couple of hours to get lucky.

Some more questions:

Is lan1 configured? And if so, is it supposed to be?

# ifconfig lan1

Are there any entries in /etc/rc.config.d/netconf that confiure lan1?

Are you running gated? (GATED=1 in netconf)

If you are, what happens if you stop it?

/sbin/init.d/gated stop

[Graham Cameron_1]

You're running Oracle, right ?
Oracle tools, such as sqlplus, reportwriter (serverside), create these temp files and don't clean up.
I don't know if you can stop them, we have learned to live with them, but we regularly clean them out.
-- Graham