problem with disk usage

[Database Administrator]

Hi,

I have strange result from du and df on my Solaris 10.

-bash-3.2$ pwd
/xpart
-bash-3.2$ du -hs .
13G .
-bash-3.2$ df -h .
Filesystem size used avail capacity Mounted on
/dev/md/dsk/d50 18G 16G 2.4G 87% /xpart


As you can see du tells that I'm using 13G and df tells that I'm using 16G. I don't know a reason. Any hint?


Thanks in advance,
kawu.

[Database Administrator]

odbiorca@spamu.pl wrote:
> -bash-3.2$ du -hs .
> 13G .
> -bash-3.2$ df -h .
> Filesystem size used avail capacity Mounted on
> /dev/md/dsk/d50 18G 16G 2.4G 87% /xpart
>
> As you can see du tells that I'm using 13G and df tells that I'm using 16G. I don't know a reason. Any hint?
>

#1 open (in-use) files were deleted. This removes them from the
directory so that 'du' cannot find them, but they remain on the disk
and are properly accounted for by 'df'. Resolution: have the
application close the files (or kill the application).

#2 Filesystem corruption is unlikely, but possible. Any number of
symptoms may be present if corruption occurs.

#3 Hidden mount point. If there is data in a directory, it can be
hidden by mounting another filesystem on top. Again, 'du' can't get
to the area underneath because of the mount point, but the data is
still there and visible to 'df'.

I'll bet one of those three...

--
Darren

[Database Administrator]

Darren Dunham pisze:

>
> #1 open (in-use) files were deleted. This removes them from the
> directory so that 'du' cannot find them, but they remain on the disk
> and are properly accounted for by 'df'. Resolution: have the
> application close the files (or kill the application).
I'll check that.

>
> #2 Filesystem corruption is unlikely, but possible. Any number of
> symptoms may be present if corruption occurs.
Probably, it isn't that.

>
> #3 Hidden mount point. If there is data in a directory, it can be
> hidden by mounting another filesystem on top. Again, 'du' can't get
> to the area underneath because of the mount point, but the data is
> still there and visible to 'df'.

I check in /etc/mnttab and /etc/vfstab and there aren't hidden mount point.

[Database Administrator]

odbiorca@spamu.pl pisze:
> Darren Dunham pisze:
>
>>
>> #1 open (in-use) files were deleted. This removes them from the
>> directory so that 'du' cannot find them, but they remain on the disk
>> and are properly accounted for by 'df'. Resolution: have the
>> application close the files (or kill the application).
> I'll check that.

I have used lsof to see open files on /xpart. I don't see any suspect files. How deleted files will looks like?.

Or maybe it is other way to find that files?

[Database Administrator]

odbiorca@spamu.pl wrote:
> I have used lsof to see open files on /xpart. I don't see any suspect files. How deleted files will looks like?.
>
> Or maybe it is other way to find that files?

lsof is one of the best ways. An alternative is to do...

find /proc -type f -links 0 -ls

Look for "big" files. But this shows unlinked files on the whole
system, not necessarily on the filesystem of interest.

--
Darren

[HENARRY JAYA]

You have at least a one yr. warranty so just use it and enjoy, no body checks the usage of the cpu/disc/memory. The numbers fluctuate wildly on all lap tops and computers and if it is working forget about monitoring it unless you do have a problem.
If you have set up and or Installed a very good Internet Security software then you will not have any problems with virus/malware/Trojans/spy ware.