/var/tmp filling up on OS X Server

[mezza]

Hi,

I'm running Zimbra 4.5.6_GA_1044 on a Mac OS X server.

Everything is fine, except I had a server freeze the other day when it ran out of disk space. Looking around I see that Zimbra has filled up /var/tmp with 61GB of data!:

zimbra$ du -h -d0 /var/tmp/
 61G    /var/tmp/

Looking in /var/tmp, I see loads of entries like:

drwx------   11 zimbra  wheel  374 Nov 20 20:03 clamav-ff417d6bdad399986cce8869614861d8

Inside of which is:

zimbra$ ls -l /var/tmp/clamav-ff417d6bdad399986cce8869614861d8/
total 42624
-rw-rw-rw-   1 zimbra  wheel     17992 Nov 20 20:03 COPYING
-rw-rw-rw-   1 zimbra  wheel   4736103 Nov 20 20:03 main.db
-rw-rw-rw-   1 zimbra  wheel      3083 Nov 20 20:03 main.fp
-rw-rw-rw-   1 zimbra  wheel    640977 Nov 20 20:03 main.hdb
-rw-rw-rw-   1 zimbra  wheel       318 Nov 20 20:03 main.info
-rw-rw-rw-   1 zimbra  wheel   2333904 Nov 20 20:03 main.mdb
-rw-rw-rw-   1 zimbra  wheel  14072345 Nov 20 20:03 main.ndb
-rw-rw-rw-   1 zimbra  wheel       217 Nov 20 20:03 main.zmd

Should these files not be deleted on a regular basis? Is there a cron job I should be adding? I've looked around on the forum but don't see anything relevant.

Thanks in advance,

Mezza

[Derek Delpero]

We're running the same version of Zimbra as you but under Red Hat. We started having this same problem this past Friday. This did coincide with some other updates to the server, but as of yet, I've not determined how any of those updates could have affected Zimbra.

Have you been able to determine the cause the of this problem?

[mezza]

Hi Derek,

It's wierd, but since deleting all the subdirectories and restarting Zimbra, all seems well now.

No new clamd created subdirectories. My suspicion is that clamd must have gone awol for a period, but I'm currently speculating.

Mezza

[Derek Delpero]

Thanks for the reply. I deleted the tmp files and restarted the server, but unfortunately the tmp files started to quickly come back. I'll try updating to 4.5.10 and see if that solves the problem.

[mmorse]

The version of clamav included in 4.5.6 has been proven troublesome - mezza, if you haven't already you should update to 4.5.10 as well.
(Of course, if doing so doesn't solve the problem for you then we need to know about it!)

[dwmtractor]

4.5.6 also had a problem where a couple of log files were growing to insane proportions due to over-verbose logging. You really ought to get off that version ASAP. See this thread for details.

Dan

[mmorse]

For instance what most people experienced: [SOLVED] Clamd.pid - no such file
The /var/tmp filling up is a new one, but it's generally easier if your on the most recent version before we spend too much time troubleshooting

[Mike Oliveri]

I'm having the same problem with the /tmp directory filling up. Mine is currently 186GB, and all the files begin with kv and are owned by zimbra. None seem to be older than 11/20/07. Is it safe to just delete these? Where are they coming from?

I'll be upgrading today or tomorrow, but I'd like to dump all these files if I can. My /opt/zimbra folder is about 24GB, so I'll be looking into the log files, too.

Mike