1 |
Last week I got a message the my /var partition was almost full. Since |
2 |
it was 10G and I am using lvm2 I added 5G more to it. This evening I |
3 |
got the same message, now I had to investigate. When I did I found that |
4 |
/var/log/messages is huge. |
5 |
|
6 |
# ls -lh /var/log/messages |
7 |
-rw------- 1 root root 12G Aug 16 20:15 /var/log/messages |
8 |
|
9 |
It seem to be constantly written to and growing. |
10 |
|
11 |
# ls -l /var/log/messages |
12 |
-rw------- 1 root root 11986603021 Aug 16 20:20 /var/log/messages |
13 |
# ls -l /var/log/messages |
14 |
-rw------- 1 root root 11986687279 Aug 16 20:20 /var/log/messages |
15 |
# ls -l /var/log/messages |
16 |
-rw------- 1 root root 11986759997 Aug 16 20:21 /var/log/messages |
17 |
# ls -l /var/log/messages |
18 |
-rw------- 1 root root 11986783403 Aug 16 20:21 /var/log/messages |
19 |
# ls -l /var/log/messages |
20 |
-rw------- 1 root root 11986830215 Aug 16 20:21 /var/log/messages |
21 |
|
22 |
When I tail it I get the following. |
23 |
# tail /var/log/messages |
24 |
Aug 16 20:22:59 host kernel: usb-storage: -- transfer complete |
25 |
Aug 16 20:22:59 host kernel: usb-storage: Bulk command transfer result=0 |
26 |
Aug 16 20:22:59 host kernel: usb-storage: Attempting to get CSW... |
27 |
Aug 16 20:22:59 host kernel: usb-storage: usb_stor_bulk_transfer_buf: |
28 |
xfer 13 bytes |
29 |
Aug 16 20:22:59 host kernel: usb-storage: Status code 0; transferred 13/13 |
30 |
Aug 16 20:22:59 host kernel: usb-storage: -- transfer complete |
31 |
Aug 16 20:22:59 host kernel: usb-storage: Bulk status result = 0 |
32 |
Aug 16 20:22:59 host kernel: usb-storage: Bulk Status S 0x53425355 T |
33 |
0x5c33 R 0 Stat 0x0 |
34 |
Aug 16 20:22:59 host kernel: usb-storage: scsi cmd done, result=0x0 |
35 |
Aug 16 20:22:59 host kernel: usb-storage: *** thread sleeping. |
36 |
|
37 |
What's going on here? Why all these usb-storage messages? |
38 |
|
39 |
I don't know exactly when this started, but I'm guessing it has to do |
40 |
with a recent upgrade. |
41 |
|
42 |
I also thought there's suppose to be some sort of log rotation going on |
43 |
to prevent this. |
44 |
|
45 |
Any ideas? |
46 |
|
47 |
Right now I'm going to "cat /dev/null > /var/log/messages" so I can boot |
48 |
up in the morning. |
49 |
|
50 |
Now my /var dropped to 16%. |
51 |
|
52 |
Thanks, |
53 |
|
54 |
dhk |