[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RAQ4i : webserver down



> > What in the world made cobalt devs decide to make such a small root file
> a better question would be "what in the world did you do to fill it up?"
> in most cases I  have found that it's not the size of the partition...
it's
> how it's used that often causes it to get filled up... I see a lot of poor
> management, improper building, broken spools and lack of monitoring that
> allows the problem to become dangerous...
> Zeffie

> Well, to be honest, I haven't used the root partition for anything of my
> own.
> The only thing I remember was that I grows every time I was installing
> official patches or pkg's like the ones from pkgmaster.
> But I always placed them in /home/packages.
> I don't even have all the fancy packages like mailscanner,spamassassin
> etc... so I really dunno what filled it up.

I look for things like files in /root/ / and see whats going on in /usr  ...
Those are the most common places to notice something that shouldn't be
there..

Here is a funny one... :)
A consultant/spammer that started in this group sells a version of webalizer
that slowly over time fills up /etc with a dns lookup database...  This same
version contains the dns hole and I think I have seen that hole used a
couple times but I can't say for sure... (or care.. I just fix em) anyway...
it takes a long time but slowly it will fill up / not to mention all the
read and writes to a partition that shouldn't be used like that...

keep in mind it could also be the report file  from a sniffer running on
your system too...

You need to keep track of those bit's and bytes!

Zeffie
Cobalt RaQ System Administration, Maintenance and Repairs.
http://www.zeffie.com/how_to_contact_zeffie.html 734.454.9117
http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms
Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus and other
GUI's