Hello there,
sorry for the late delay, but the issue slipped a little bit, also since I
got almost no substantial help. Most people where at first
suspecting, that I erased some vital system-file, but no go..
The usefull information I received was:
1. From Greg Coleman <greg@crusoe.cruse.net>
"Just a thought. Sometimes if you have overlapping partitions
any file that is in the shared cylinders will cause a
crash when accessed. Its possible that /var is sharing
space with its neighbor on the disk. (check format) "
Not the case, partitions are split on cylinders.
2. From Ian Collins <ian@masuma.com>
"The file wasn't wtmpx was it? This should be touched if removed. "
(There are also some tools which are able to 'age' the wtmpx file,
search for wtmp in the archives)
So basically it looks like an inconsistency in the memory image of
the ufs partiton in question, since no fsck was done, so we're more
or less confident.
Thanx to the following for asking/suggesting:
Ian Collins <ian@masuma.com>
"David W. Blaine" <blained@gdls.com>
Nikos George <nikos@jimmy.harvard.edu>
"John D. Vo" <jvo@inx.inx.net>
"Paquette, Trevor" <TrevorPaquette@mcc.net>
Jonathan.Loh@bankamerica.com
"Greg Coleman (G-tech Corp.)" <greg@crusoe.crusoe.net>
Gerhard den Hollander <gerhard@james.jason.nl>
-daniel
Original Question
most people that answered so far were missing the file&process
name, ok here they are:
The file in /var was /var/adm/tss_logs/et_accounting.sql
The Proccess is 'et', some X11 Application for maintaining Data
Permissions.
I hope this clears it up a little bit
-daniel
Original Question:
Hello there,
we had a crash recently, after deleting the file, the series of
actions are below. Since this is a production machine (we had
hotstandby, so no interruption), people here are worried, should they?
1. Someone fould file of 250MB in /var
2. I told them to kill it
3. File delete, diskspace not reclaimed (=file still open)
4. Me killing process in question
5. Machine Reboots (no fsck), in /var/adm/messages found:
Jan 22 10:49:59 szrhtic3 unix: 80001e, block:4840, ino:174495, fs:/var Jan
22 10:49:59 szrhtic3 unix: syncing file systems... [2] 8 [2] [2] [2] [2]
[2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2 ] [2] [2] [2] [2] [2] [2]
[2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2]
[2] [2] [2] [2] [2] [2] [ 2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2] [2]
[2] [2] cannot sync -- giving up Jan 22 10:49:59 szrhtic3 unix: 4665
static and sysmap kernel pages Jan 22 10:49:59 szrhtic3 unix: mu0: obio
0xe0001000 Jan 22 10:49:59 szrhtic3 unix: espdma0 at sbus0: SBus slot f
0x400000 Jan 22 10:49:59 szrhtic3 unix: esp0: esp-options=0x46 Jan 22
10:49:59 szrhtic3 unix: esp0 at espdma0: SBus slot f 0x1 current user
process pages Jan 22 10:49:59 szrhtic3 unix: 7192 total pages (7192
chunks) Jan 22 10:49:59 szrhtic3 unix: dumping to vp f5c0d784, offset
966784 Jan 22 10:49:59 szrhtic3 unix: SunOS Release 5.6 Version
Generic_105181-06 [UNIX(R) System V Release 4.0] Jan 22 10:49:59 szrhtic3
unix: Copyright (c) 1983-1997, Sun Microsystems, Inc. Jan 22 10:49:59
szrhtic3 unix: pac: enabled - SuperSPARC/SuperCache Jan 22 10:49:59
szrhtic3 unix: cpu0: TI,TMS390Z55 (mid 8 impl 0x0 ver 0x3 clock 50 MHz)
Jan 22 10:49:59 szrhtic3 unix: mem = 131072K (0x8000000) Jan 22 10:49:59
szrhtic3 unix: avail mem = 126386176 [ and so on, system was up after 80s]
TIA, will summarize,
-- Daniel Kluge / CTS-Engineer Direct : +41-1-215-4162 TIBCO Inc. Phone : +41-1-215-4151 Bahnhofstrasse 52 Fax : +41-1-215-4152 CH-8001 Zurich E-Mail : danielk@tibco.com Switzerland Web : http://www.tibco.com-- Daniel Kluge / CTS-Engineer Direct : +41-1-215-4162 TIBCO Inc. Phone : +41-1-215-4151 Bahnhofstrasse 52 Fax : +41-1-215-4152 CH-8001 Zurich E-Mail : danielk@tibco.com Switzerland Web : http://www.tibco.com
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:14 CDT