Results 1 to 15 of 15
Thread: [VERY URGENT] /tmp problems
-
01-07-2005, 10:41 AM #1WHT Addict
- Join Date
- Mar 2004
- Posts
- 100
[VERY URGENT] /tmp problems
df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda1 1012M 961M 0 100% /
/dev/hda7 18G 6.7G 11G 39% /home
none 244M 0 244M 0% /dev/shm
/dev/hda2 9.9G 4.0G 5.4G 43% /usr
/dev/hda3 6.9G 393M 6.2G 6% /var
/tmp 1012M 961M 0 100% /var/tmp
It seems that tmp is full, but I already did empty the tmp folder, and nothing changes...
What can I dow now? httpd seems to fail when 100% of tmp size is reached...
-
01-07-2005, 11:27 AM #2Junior Guru
- Join Date
- Dec 2004
- Posts
- 224
Check if some process is running which keeps writing to tmp..
-
01-07-2005, 07:23 PM #3Newbie
- Join Date
- Jun 2001
- Location
- Chatsworth, CA
- Posts
- 8
Are you using mod_gzip?
If mod_gzip is writing to /tmp and it hits its lmit apache will segfault.
Your resolution would be:
1) edit httpd.conf and comment out mod_gzip
2) place a cron to delete old mod_gzip files from /tmp
3) edit httpd.conf so that mod_gzip writes to a partition with more space.
If you can provide more detail as to what type of files are filling up /tmp someone here I am sure can probably help you.
Jeremy Martinez
-
01-07-2005, 07:58 PM #4Web Hosting Evangelist
- Join Date
- Sep 2002
- Location
- Canada
- Posts
- 456
Try:
du -sh /tmp
what do you get ?Reliability • Performance • Integrity
-
01-07-2005, 08:30 PM #5Web Hosting Master
- Join Date
- May 2003
- Location
- Florida
- Posts
- 902
Check for any scripts in the /tmp or /var/tmp. I recently had a dedicated server customer who had been hacked. /tmp was at 100%. There were scripts in the /tmp and the /var/tmp, as well in one of the customers hidden folders. We found different scripts and crons.
We found darkman.pl, psybnc, a cron for y2kupdate, and others.
-
01-08-2005, 03:35 AM #6WHT Addict
- Join Date
- Aug 2004
- Posts
- 171
Dacsoft has it right. One of your accounts has probably been hacked. Try a find . -name on darkman.pl or d.pl and you will probably find the script. Or grep on "CGI-Telnet".
-
01-08-2005, 06:03 AM #7Web Hosting Master
- Join Date
- Dec 2000
- Posts
- 954
I am curiose if i can delete some folders i have in /tmp as below without causing problems
drwxrwxrwt 2 xfs xfs 1024 Jan 8 01:23 .font-unix/
drwxrwxrwt 2 root root 1024 Jan 8 05:02 .ICE-unix/
drwx------ 2 root root 12288 Dec 9 01:10 lost+found/
-
01-08-2005, 06:42 AM #8Web Hosting Master
- Join Date
- Nov 2004
- Location
- India
- Posts
- 1,104
Nope they are standard directories in the /tmp of a cpanel server. The issue is related to some other issue. I suspect apache or an attack on your server.
-
01-08-2005, 08:37 AM #9WHT Addict
- Join Date
- Feb 2002
- Location
- uk
- Posts
- 110
pico some of the files in your tmp to see what the nature of the script is.
-
01-08-2005, 12:26 PM #10Disabled
- Join Date
- Nov 2004
- Location
- England
- Posts
- 513
Probably the phpBB worm. Do a directory listing and see what's in there.
Also, from bash cd /tmp then do echo /* just incase ls has been compromised.
-
01-09-2005, 05:19 AM #11Junior Guru
- Join Date
- Apr 2003
- Location
- Brooklyn NY
- Posts
- 213
it might be simply the 'lmysql' log which even after you empty it it still shows full untill you disable mysql logging
-
01-09-2005, 05:42 AM #12learning is in the doing
- Join Date
- Sep 2000
- Location
- Alberta, Canada
- Posts
- 3,146
There is not enough information for anyone to give a good answer.
A) When did the problem start and what was changed just before that?
B) Do this: cd /tmp; rm -f php* sess* impatt*;ls -lh then copy & paste what is showing into this thread.
Or, hire a ServerAdmin to look into the situation.• PotentProducts.com - for all your Hosting needs
• Helping people Host, Create and Maintain their Web Site
• ServerAdmin Services also available
-
01-09-2005, 05:55 AM #13Disabled
- Join Date
- Dec 2004
- Posts
- 176
My /tmp kept filling up to 100% every 2-3 days after running /scripts/securetmp. I was not hacked either. It was inside one of the logwatch directories in /tmp that filled it up for some reason.
-
01-09-2005, 07:20 AM #14Linux Guru
- Join Date
- Mar 2004
- Location
- Odessa, Ukraine
- Posts
- 610
I reccomend monufy this script and increase /tmp size.
-
01-09-2005, 10:06 AM #15Disabled
- Join Date
- Dec 2004
- Posts
- 176
How do yo increase /tmp size?