Socket error message is filling up /var 3

[toyt78]

On my Solaris 2.6 I have a /var that is filling up quickly where now it is at 95%. I keep getting Socket Error message. Please advise what area I can look at to correct or find what the problem is? Also what happens when I get to 100% on /var?

 

[bfitzmai]

I take it that /var is in a partition by itself. At least I hope so. Default installation, puts /var in the root partition. If this is the case, you system not be able to reboot and may crash. If /var is in a partition by itself, you will get error messages about it being full. You will need to do some maintenance and remove the files that are not needed.

Can you post the error message you are getting?

 

[Mike042]

I would use the command du -sk /var/* | sort -n (at regular intervals if necessary) to find what part of /var is growing and what part currently occupies the most space. Then focus my attention there.

I hope that helps.

Mike

 

[toyt78]

Thanks, /var is in its own partition and for some reason it stopped about 60 minutes ago and is "stable" at 95% now.

The biggest directory that is: /var/adm

 

[KenCunningham]

Look at and clear files like messages, wtmpx, sulog in /var/adm

I guess it might also be necessary to look into the cause of the problem - examining /var/adm/messages before clearing it down might help in this respect. Post back here with any other queries arising.

To clear the files do the following:

cat /dev/null > filename (eg wtmpx etc)

 

[toyt78]

Thanks