/var/adm/crash/ files

[yadvinder123]

Hi Everyone,

M using Unix HP-UX and /var directory in HP-UX is showing 95%

I checked that th most files in /var/adm/crash directory consuming a lot of space

Mentioned below is the output

#  find /var -size +20480 | xargs ls -l | sort +4nr -5 | head -100
-rw-r--r--   1 root       root       77007636 Oct 13 11:51 /var/adm/syslog/syslog.log
-rw-r--r--   1 root       root       67092480 Apr  5  2005 /var/adm/crash/crash.2/image.2.2
-rw-r--r--   1 root       root       67080192 Apr  5  2005 /var/adm/crash/crash.2/image.2.1
-rw-r--r--   1 root       root       67076096 Apr  5  2005 /var/adm/crash/crash.2/image.1.1
-rw-r--r--   1 root       root       67067904 Apr  5  2005 /var/adm/crash/crash.2/image.1.2
-rw-r--r--   1 root       root       49475584 Apr  5  2005 /var/adm/crash/crash.2/image.1.3
-rw-r--r--   1 root       sys        36164214 Feb  5  2011 /var/opt/ignite/recovery/2011-02-05,23:17/flist
-rw-r--r--   1 root       root       33550336 Apr  5  2005 /var/adm/crash/crash.1/image.1.1
-rw-r--r--   1 root       root       33542144 Apr  4  2005 /var/adm/crash/crash.0/image.1.4
-rw-r--r--   1 root       root       33525760 Apr  4  2005 /var/adm/crash/crash.0/image.1.2
-rw-r--r--   1 root       root       33525760 Apr  4  2005 /var/adm/crash/crash.0/image.1.3
-rw-r--r--   1 root       root       33525760 Apr  4  2005 /var/adm/crash/crash.0/image.1.5
-rw-r--r--   1 root       root       33525760 Apr  4  2005 /var/adm/crash/crash.0/image.1.7
-rw-r--r--   1 root       root       33525760 Apr  5  2005 /var/adm/crash/crash.1/image.1.2
-rw-r--r--   1 root       root       33525760 Apr  5  2005 /var/adm/crash/crash.1/image.1.3
-rw-r--r--   1 root       root       33525760 Apr  5  2005 /var/adm/crash/crash.1/image.1.5
-rw-r--r--   1 root       root       33525760 Apr  5  2005 /var/adm/crash/crash.1/image.2.2
-rw-r--r--   1 root       root       33521664 Apr  4  2005 /var/adm/crash/crash.0/image.1.1
-rw-r--r--   1 root       root       33521664 Apr  5  2005 /var/adm/crash/crash.1/image.2.1
-rw-r--r--   1 root       root       33509376 Apr  5  2005 /var/adm/crash/crash.1/image.1.4
-rw-r--r--   1 root       root       33501184 Apr  4  2005 /var/adm/crash/crash.0/image.1.6
-rw-r--r--   1 root       root       29154768 Apr  4  2005 /var/adm/crash/crash.0/vmunix
-rw-r--r--   1 root       root       29154768 Apr  5  2005 /var/adm/crash/crash.1/vmunix
-rw-r--r--   1 root       root       19544656 Sep  2  2008 /var/adm/crash/crash.2/vmunix
-rw-r--r--   1 root       root       16359424 Apr  4  2005 /var/adm/crash/crash.0/image.1.8
-rw-r--r--   1 root       root       14639104 Apr  5  2005 /var/adm/crash/crash.1/image.1.6

I want to delete these crash files as these are 6 years old,is it OK to delete the same or not?

Please revert ASAP............................

[James R. Ferguson]

Hi:

You certainly don't need kernel crash dump files from 2005.  At the time a dump is created, if you don't want HP to analyze it and/or the cause has been rectified, delete the files in '/var/adm/crash'.

Regards!

...JRF...

[yadvinder123]

Thanx for the revert. I think it will surely reduce my following space of var directory

Filesystem          kbytes    used   avail %used  iused  ifree %iuse Mounted on
/dev/vg00/lvol3    1048576  107616  933616   10%   3342  29394   10% /
/dev/vg00/lvol1     511672   60800  399704   13%     65  50111    0% /stand
/dev/vg00/lvol8    4194304 3994280  198512   95%  24918   6250   80% /var
/dev/vg00/lvol7    4194304 1210752 2960256   29%  30467  93213   25% /usr

[Dennis Handly]

>You certainly don't need kernel crash dump files from 2005.

You may want to keep the small INDEX file, unless you know that crash was patched.

Or at least only keep the last in a series.

[V. Nyga]

Hi,

you could/should also reduce your syslog.log - it also seems to collect informations for many years.
Of course you should check what fills up your log to 77 MB.
(With 'tail -xx' you'll see the last 'xx' enrties.)

With SAM you can cut system files (under 'Routine Tasks').

V.