topic Re: vg_splat-lv_current over utilized in Firewall and Security Management

vg_splat-lv_current over utilized

rajeshpk1900 — Thu, 25 Feb 2021 04:36:58 GMT

Hi All,
Im having checkpoint 23800 fw and can see that below partition is over utilized from df -h output.
Is it normal to see this or if not, what should I do ? please assit..

[Expert@MYFW:0]# df -h
Filesystem            Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current
                       31G   27G 3.4G 89% /

[Expert@MYFW:0]# pwd
/home/admin
[Expert@MYFW:0]# ls -lrt
total 852
-rw-rw---- 1 admin root      0 Nov 22 2018 sessiond.elg
-rw-rw---- 1 admin root     24 Nov 5 2019 cpextinttest1.pcap
-rw-rw---- 1 admin root     24 Nov 5 2019 cpext717pm.pcap
-rw-rw---- 1 admin root     24 Nov 5 2019 cpext717-1pm.pcap
-rw-rw---- 1 admin root   4340 Nov 5 2019 cpext717-2pm.pcap
-rwxrwxrwx 1 admin root 402875 Mar 13 2020 healthcheck.sh
-rw-r--r-- 1 admin root 436500 Feb 22 06:08 last_dump.log
[Expert@MYFW:0]# cd /dev/mapper/
[Expert@MYFW:0]# ls -lrt
total 0
crw------- 1 admin root 10, 63 Aug 22 2020 control
brw-rw---- 1 admin disk 253, 1 Aug 22 2020 vg_splat-lv_fcd_GAIA
brw-rw---- 1 admin disk 253, 2 Aug 22 2020 vg_splat-lv_fcd_R77.30
brw-rw---- 1 admin disk 253, 3 Aug 22 2020 vg_splat-hwdiag
brw-rw---- 1 admin disk 253, 0 Aug 22 2020 vg_splat-lv_current
brw-rw---- 1 admin disk 253, 4 Aug 22 2020 vg_splat-lv_log
[Expert@MYFW:0]#

Re: vg_splat-lv_current over utilized

PhoneBoy — Thu, 25 Feb 2021 07:15:10 GMT

Depends on what the original partition sizes are, which could be relatively small.

Re: vg_splat-lv_current over utilized

rajeshpk1900 — Thu, 25 Feb 2021 09:33:53 GMT

So, may I know how do I proceed to find if its causing issue or not...pls suggest

Re: vg_splat-lv_current over utilized

Timothy_Hall — Thu, 25 Feb 2021 13:39:31 GMT

Provide output of this command to help find any large files left over, usually in /home/admin:

find / -mount -type f -size +500000 -ls

Re: vg_splat-lv_current over utilized

G_W_Albrecht — Thu, 25 Feb 2021 14:26:13 GMT

I second that - the .pcap files look suspicious to me 8)