SMB not working, disk space all gone

[DanJar]

Hi All,

I started troubleshooting a problem with my server today which initially looked like SMB was not working properly. My XP box & my other Vista box could not access the share.
On the XP box it would allow accessing the directories but not any of the files. Vista would not even get that far.

Initially because of that I thought it might be a packet drop issue, so I checked all my network gear, unplugged & replugged everything to ensure it was ok & I am able to ping the box with no dropped packets & access Webmin on it as well.

I thought an Update or refresh of SMB might fix it so I typed yum update smb, this attempted to download the update to a location in /var/ somewhere only to return with no disk space..

Upon checking the disk drive status, my 1tb drive mounted / has 0 bytes free.

I fired up the monitor & tried to login directly to the box's gui only to find an error about no disk space. so no access there. (I can use console & webmin quite fine, & SSH into the box from my other 2 as well)

The box has the 1tb drive & 3 other 300gb drives raided together to make 900gb, currently I am moving a large 100gb directory from the 1tb drive over to this raid array in the efforts to free up some space. however I deleted a steam games backup folde0r about 16gb worth & it still showed up as 0 bytes free. to delete this I used the rm -r /<directory structure>/steambackups. Have I done this right or is there something else I need to do?

Also wondering if anyone might have any tips as to what could have possibly consumed all my remaining disk space (had about 50 gb free)

Any assistance is appreciated.. Thanks

[DanJar]

Im now able to access, but down to 10gb free already..

running processes

ID Owner Started Command
1 root 16:09 /sbin/init
658 root 16:09 /sbin/udevd -d
1687 root 16:09 auditd
1689 root 16:09 /sbin/audispd
1703 root 16:09 rsyslogd -c 3
1721 rpc 16:09 rpcbind
1734 rpcuser 16:09 rpc.statd
1779 root 16:09 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
1810 root 16:09 rpc.idmapd
1823 dbus 16:09 dbus-daemon --system
1846 root 16:09 /usr/sbin/acpid
1854 haldaemon 16:09 hald
1920 root 16:09 hald-runner
2029 haldaemon 16:09 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
2055 root 16:09 hald-addon-input: Listening on /dev/input/event5 /dev/input/event0 /dev/input/ev ...
1857 root 16:09 /usr/sbin/console-kit-daemon
2034 root 16:09 pcscd
2064 root 16:09 NetworkManager --pid-file=/var/run/NetworkManager/NetworkManager.pid
2066 root 16:09 /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -u -f /var/l ...
2070 root 16:09 /usr/sbin/nm-system-settings --config /etc/NetworkManager/nm-system-settings.con ...
2091 root 16:09 /usr/sbin/bluetoothd
2119 root 16:09 /usr/sbin/sshd
3767 root 16:12 sshd: danjar [priv]
3769 danjar 16:12 sshd: danjar@pts/0
3770 danjar 16:12 -bash
3822 root 16:13 su
3824 root 16:13 bash
2165 root 16:09 /usr/sbin/gpm -m /dev/input/mice -t exps2
2173 root 16:09 /usr/sbin/httpd
2206 apache 16:09 /usr/sbin/httpd
2207 apache 16:09 /usr/sbin/httpd
2208 apache 16:09 /usr/sbin/httpd
2209 apache 16:09 /usr/sbin/httpd
2210 apache 16:09 /usr/sbin/httpd
2211 apache 16:09 /usr/sbin/httpd
2212 apache 16:09 /usr/sbin/httpd
2213 apache 16:09 /usr/sbin/httpd
2184 root 16:09 crond
2193 root 16:09 kerneloops
2214 root 16:09 nmbd -D
2224 root 16:09 smbd -D
2241 root 16:09 smbd -D
3766 root 16:11 smbd -D
4140 danjar 18:30 smbd -D
2235 root 16:09 /usr/sbin/atd
2254 root 16:09 cupsd
2296 root 16:09 anacron -s
3878 root 17:14 /bin/bash /usr/bin/run-parts /etc/cron.daily
3940 root 18:18 /usr/bin/perl -w /etc/cron.daily/0logwatch
4587 root 18:55 sh -c cat /var/cache/logwatch/logwatch.066f1pyn/messages-archive /var/log/messag ...
4588 root 18:55 cat /var/cache/logwatch/logwatch.066f1pyn/messages-archive /var/log/messages
4589 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats
4590 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice talkd
4591 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice telnetd
4592 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice inetd
4593 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice nfsd
4594 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice /sbin/mingetty
4595 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice netscreen
4596 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice netscreen
4597 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost
4598 root 18:55 /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate
3941 root 18:18 awk -v progname /etc/cron.daily/0logwatch progname {????? print progname ":\n"?? ...
2315 root 16:09 transmission-daemon -a 192.168.2.*
2323 root 16:09 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
4607 root 18:56 [miniserv.pl] <defunct>
4608 root 18:56 /usr/libexec/webmin/proc/index_tree.cgi
2326 root 16:09 /usr/sbin/gdm-binary -nodaemon
2397 root 16:09 /usr/libexec/gdm-simple-slave --display-id /org/gnome/DisplayManager/Display1 -- ...
2398 root 16:09 /usr/bin/Xorg :0 -nr -verbose -auth /var/run/gdm/auth-for-gdm-DLochI/database -n ...
2651 root 16:10 /usr/libexec/gdm-session-worker
2711 danjar 16:10 gnome-session
3003 danjar 16:10 bluetooth-applet
3015 danjar 16:10 gpk-update-icon
3016 danjar 16:10 imsettings-applet --disable-xsettings
3019 danjar 16:10 python /usr/share/system-config-printer/applet.py
3026 danjar 16:10 kerneloops-applet
3027 danjar 16:10 nm-applet --sm-disable
2327 root 16:09 /sbin/mingetty tty4
2328 root 16:09 /sbin/mingetty tty5
2329 root 16:09 /sbin/mingetty tty2
2330 root 16:09 /sbin/mingetty tty3
2331 root 16:09 /sbin/mingetty tty6
2431 gdm 16:09 /usr/bin/dbus-launch --exit-with-session
2751 danjar 16:10 dbus-launch --sh-syntax --exit-with-session
2755 danjar 16:10 /bin/dbus-daemon --fork --print-pid 7 --print-address 9 --session
2826 danjar 16:10 /usr/libexec/gvfsd
2892 danjar 16:10 /usr/libexec//gvfs-fuse-daemon /home/danjar/.gvfs
3181 danjar 16:10 /usr/libexec/notification-daemon
2 root 16:09 [kthreadd]
3 root 16:09 [migration/0]
4 root 16:09 [ksoftirqd/0]
5 root 16:09 [watchdog/0]
6 root 16:09 [events/0]
7 root 16:09 [khelper]
80 root 16:09 [kintegrityd/0]
82 root 16:09 [kblockd/0]
84 root 16:09 [kacpid]
85 root 16:09 [kacpi_notify]
183 root 16:09 [cqueue]
187 root 16:09 [ata/0]
188 root 16:09 [ata_aux]
190 root 16:09 [ksuspend_usbd]
195 root 16:09 [khubd]
198 root 16:09 [kseriod]
240 root 16:09 [kswapd0]
290 root 16:09 [aio/0]
519 root 16:09 [kpsmoused]
524 root 16:09 [kstriped]
527 root 16:09 [ksnapd]
587 root 16:09 [scsi_eh_0]
588 root 16:09 [scsi_eh_1]
589 root 16:09 [scsi_eh_2]
590 root 16:09 [scsi_eh_3]
593 root 16:09 [scsi_eh_4]
594 root 16:09 [scsi_eh_5]
606 root 16:09 [kdmflush]
607 root 16:09 [kdmflush]
608 root 16:09 [kdmflush]
609 root 16:09 [kjournald]
960 root 16:09 [kgameportd]
1460 root 16:09 [kauditd]
1517 root 16:09 [kmpathd/0]
1519 root 16:09 [kmpath_handlerd]
1543 root 16:09 [kjournald]
1544 root 16:09 [kjournald]
1801 root 16:09 [rpciod/0]
2105 root 16:09 [btaddconn]
2106 root 16:09 [btdelconn]
4543 root 18:54 [pdflush]
4571 root 18:55 [pdflush]

[Ben Cotton]

I didn't see anything obvious in your process list. Is the 1TB a single partition or is the part that's filling a subset of the disk?