How to limit /var/adm/wtmpx and /var/adm/lastlog

Hi,
As many others I have a problem too with these files growing indefinitely.
I wanted to know if there is any system configuration or system program to limit or trim the size of these files.
I am OK if the oldest records get purged, but I don't want these files to grow indefinitely.
I appreaciate any suggestions and help.
Thanks
Srini

I think the easiest would be to use 'dd' to copy the file to a temporary area and then back again:
dd if=/var/adm/wtmpx of=/tmp/wtmpx.save bs=372
dd if=/tmp/wtmpx.save of=/var/adm/wtmpx bs=372 skip=$number_of_blocks_to_skip
The variable $number_of_blocks_to_skip is simply an arbitrary number you're comfortable with. You can build that up by using 'wc' to find the number of lines (blocks) in the file:
wsize=`wc -l /var/adm/wtmpx | awk ' { print $1 } '`
number_of_blocks_to_skip= `expr $wize - 1000` (this will ensure that the skip is until 1000 blocks from the end)

Similar Messages

  • Strange error in /var/log/messages and /var/log/warn

    Hi,
    I get following error continuosly:
    kernel: sg_write: data in/out 404/404 bytes for SCSI command 0xd--guessing data in;
    kernel: program java not setting count and/or reply_len properly
    Any idea?
    Ty
    Bye

    Hi,
    #h1:35:respawn:/etc/init.d/init.cssd run >/dev/null 2>&1 </dev/null
    by commenting above line in initttab file would stop messaging, is this would have any adverse affect on the database. As its a production server, so i am really taking time to resolve it. Your suggestions are welcome. If there is no harm in commenting the above line then i would go forward to comment that line.
    Thanks
    Jafar>

  • How to limit back up time and content

    I only want to run backup when I directr the activity.  I would like to NOT back up music
    Can't seem to find direction

    What service are you using to perform the back up - Verizon cloud or another (Google, OneDrive, etc)?  What phone do you have?

  • /var/adm/wtmpx file size control ?

    Hi :)
    The /var folder on our DNS server has reached > 90% capacity and is rising 1% a day. ls -ltr shows that the most current files are /var/adm/wtmpx and utmpx as well as lastlog and messages. Is it possible to cap the size of the wtmpx file, which seems to be the file that is growing the fastest ?
    Regards
    Annib
    Solaris 8 on Sunfire 6800

    Certainly, there are a couple of ways of doing this;
    If you want to save the old data (and you might want to if its a firewall), you can always copy the wtmpx file to something else, and then copy /dev/null over wtmpx:
    # cp /var/adm/wtmpx /var/adm/wtmpx.0
    # cp /dev/null /var/adm/wtmpx
    Then its of course a good idea to compress the old file.
    If you don't want to save any data, just copy /dev/null to wtmpx.
    A somewhat more complicated way of doing this is to hack the wtmx file and only save, for example, the 1000 last lines. This can be done with the /usr/lib/acct/fwtmp command.
    The fwtmp command lets you export the wtmpx file to something human readable (and editable), which you then may edit and convert back into your wtmpx file.
    However, there are a few bugs in this commands, so it will not work without the latest 'n' greatest fwtmp patch: 116943-02.

  • [SOLVED] Cloning boot and var partitions to a new drive for booting

    Ok first of all here's my setup:
    fakeraid (dmraid) / and home on an OCZ Revodrive
    boot with GRUB on a flash drive (since fakeraid doesn't support grub)
    var and downloads/media folder on a 500GB WD Caviar drive
    When I originally installed Arch I had the Caviar drive in my home server in a RAID5 array, so that's why I opted to install boot and grub on a flash drive simply for booting.  Now that I have the drive in my desktop I've cloned the flash drive's partitions and MBR using dd:
    #dd if=/dev/sde of=~/MBR.img bs=512 count=1
    #dd if=/dev/sde1 of=~/boot.img
    #dd if=/dev/sdc1 of=~/var.img
    I then backed up my downloads/media partition, then removed the partition table, then used dd to put the img files on the Caviar drive.
    #dd if=~/MBR.img of=/dev/sdc bs=512 count=1
    #dd of=~/boot.img of=/dev/sdc1
    #dd of=~/var.img of=/dev/sdc2
    I also created labels for the filesystems and put those in fstab.
    I'm able to mount both partitions, however I can't boot from the drive.  I get a 'grub hard disk error' (no error number) when I put it as my first drive in the BIOS. 
    I can still use the flash drive as the first hard drive in the BIOS and boot from it, then it mounts the dmraid root partition and boots successfully.  It is also able to mount the var and boot partitions in fstab. 
    Basically the only problem is that the MBR is somehow wrong.  I then tried booting back into an Arch live USB and installing GRUB from the prompt:
    grub
    grub>setup (hd4,0) (in this case the Caviar drive's boot partition was /dev/sde1
    So essentially what I'm asking is how GRUB handles the MBR.  Is it specific to the partition table of the drive in which it resides when it's originally installed?  For instance, since I had an 8GB flash drive with 2 partitions when I installed GRUB, is the backed up MBR no good for a 500GB drive with 3 partitions?
    I have everything backed up so I can start with a fresh /boot and /var if need be....I'm just not sure where to start. 
    Thanks in advance.
    Last edited by DarksideEE7 (2011-02-13 23:25:31)

    Sorry, I forgot to mention that I tried to install GRUB from the GRUB shell in a live Arch USB.  It failed on a few non-critical parts, and succeeded on the last part. I'm going to try again shortly, possibly I did something wrong.  GRUB is able to find the stage files using:
    #grub
    grub>find /grub/stage1
    grub> find /grub/stage1
    (hd0,0)
    (hd5,0)
    grub>
    (hd0,0) is the desired boot drive, while (hd5,0) is the current bootable flash drive with /boot and GRUB installed.
    Here is the output of fdisk -l:
    WARNING: GPT (GUID Partition Table) detected on '/dev/sde'! The util fdisk doesn't support GPT. Use GNU Parted.
    Disk /dev/sde: 2000.4 GB, 2000398934016 bytes
    256 heads, 63 sectors/track, 242251 cylinders, total 3907029168 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x00000000
    Device Boot Start End Blocks Id System
    /dev/sde1 1 3907029167 1953514583+ ee GPT
    Disk /dev/sdb: 60.0 GB, 60022480896 bytes
    255 heads, 63 sectors/track, 7297 cylinders, total 117231408 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0xedb72db9
    Device Boot Start End Blocks Id System
    /dev/sdb1 * 2048 206847 102400 7 HPFS/NTFS
    /dev/sdb2 206848 117227519 58510336 7 HPFS/NTFS
    Disk /dev/sdd: 40.0 GB, 40018599936 bytes
    255 heads, 63 sectors/track, 4865 cylinders, total 78161328 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x00000000
    Disk /dev/sdd doesn't contain a valid partition table
    Disk /dev/sdc: 40.0 GB, 40018599936 bytes
    32 heads, 32 sectors/track, 76329 cylinders, total 78161328 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0xb8372fcd
    Device Boot Start End Blocks Id System
    /dev/sdc1 32 21484543 10742256 83 Linux
    /dev/sdc2 21484544 156317695 67416576 83 Linux
    Disk /dev/sda: 500.1 GB, 500107862016 bytes
    255 heads, 63 sectors/track, 60801 cylinders, total 976773168 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x8497e059
    Device Boot Start End Blocks Id System
    /dev/sda1 * 2048 206847 102400 83 Linux
    /dev/sda2 206848 42149887 20971520 83 Linux
    /dev/sda3 42149888 976773167 467311640 83 Linux
    Disk /dev/dm-0: 80.0 GB, 80035053568 bytes
    32 heads, 32 sectors/track, 152654 cylinders, total 156318464 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 65536 bytes / 131072 bytes
    Disk identifier: 0xb8372fcd
    Device Boot Start End Blocks Id System
    /dev/dm-0p1 32 21484543 10742256 83 Linux
    Partition 1 does not start on physical sector boundary.
    /dev/dm-0p2 21484544 156317695 67416576 83 Linux
    Disk /dev/dm-1: 11.0 GB, 11000070144 bytes
    255 heads, 63 sectors/track, 1337 cylinders, total 21484512 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 65536 bytes / 131072 bytes
    Alignment offset: 49152 bytes
    Disk identifier: 0x00000000
    Disk /dev/dm-1 doesn't contain a valid partition table
    Disk /dev/dm-2: 69.0 GB, 69034573824 bytes
    255 heads, 63 sectors/track, 8392 cylinders, total 134833152 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 65536 bytes / 131072 bytes
    Disk identifier: 0x00000000
    Disk /dev/dm-2 doesn't contain a valid partition table
    Disk /dev/sdf: 8086 MB, 8086618112 bytes
    249 heads, 62 sectors/track, 1023 cylinders, total 15794176 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x8497e059
    Device Boot Start End Blocks Id System
    /dev/sdf1 * 62 200693 100316 83 Linux
    /dev/sdf2 200694 15794175 7796741 83 Linux
    I'm using dmraid, so just to be clear I've configured the raid using:
    #modprobe dm_mod
    #dmraid -ay
    Then I saw the array stored in /dev/mapper/silXXXXX.  I then created partitions for /boot, /, and home.  At that time I was hoping to get GRUB working with the AUR package grub2-dmraid.  I wasn't able to get it working for some time, so I just went ahead and installed boot and GRUB to a separate USB flash drive.
    Here is the output of df -h:
    Filesystem Size Used Avail Use% Mounted on
    udev 10M 268K 9.8M 3% /dev
    /dev/mapper/sil_bgbgdjaddicbp1
    11G 5.3G 4.3G 56% /
    shm 6.0G 584K 6.0G 1% /dev/shm
    /dev/mapper/sil_bgbgdjaddicbp2
    64G 38G 23G 63% /home
    /dev/sda1 95M 16M 75M 18% /boot
    /dev/sda2 19G 142M 19G 1% /var
    /dev/sda3 439G 148G 269G 36% /home/l33/Torrents
    none 1000M 132K 1000M 1% /tmp
    shm 6.0G 584K 6.0G 1% /dev/shm
    /dev/sde1 1.8T 1.1T 665G 62% /mnt/Green
    and cat /etc/mtab
    proc /proc proc rw,nosuid,nodev,noexec,relatime
    sys /sys sysfs rw,nosuid,nodev,noexec,relatime
    udev /dev devtmpfs rw,nosuid,relatime,size=10240k,nr_inodes=1022975,mode=755
    /dev/mapper/sil_bgbgdjaddicbp1 / ext4 rw,noatime,barrier=1,stripe=32,data=ordered
    devpts /dev/pts devpts rw 0 0
    shm /dev/shm tmpfs rw,nosuid,nodev 0 0
    /dev/mapper/sil_bgbgdjaddicbp2 /home ext4 rw,noatime 0 0
    /dev/sda1 /boot ext2 rw 0 0
    /dev/sda2 /var reiserfs rw,noatime 0 0
    /dev/sda3 /home/l33/Torrents ext4 rw,noatime 0 0
    none /tmp tmpfs rw,nosuid,nodev,noatime,size=1000M,mode=1777 0 0
    shm /dev/shm tmpfs rw,nosuid,nodev,size=6G 0 0
    rpc_pipefs /var/lib/nfs/rpc_pipefs rpc_pipefs rw 0 0
    nfsd /proc/fs/nfsd nfsd rw,noexec,nosuid,nodev 0 0
    /dev/sde1 /mnt/Green ext4 rw 0 0
    Also I don't have a /proc/mdstat.  That's only for mdadm RAID setups, right?  It's been quite some time since I've used mdadm so I can't remember.
    EDIT:
    So I booted into a live Arch USB and entered the grub shell.  I ran:
    #grub
    grub> root (hd3,0)
    Filesystem type is ext2fs, partition type 0x83
    grub> setup (hd3)
    Checking if "/boot/grub/stage1" exists.....no
    Checking if "/grub/stage1 exists.......yes
    Checking if "/grub/stage2 exists.......yes
    Checking if "/grub/e2fs_stage1_5 exists....yes
    Running "embed /grub/e2fs_stage1_5 (hd3)".....25 sectors are embedded.
    succeeded
    Running "install /grub/stage1 (hd3) (hd3))1+25 p (hd3,0)/grub/stage2 /grub/menu.lst".......succeeded
    Done.
    Last time I recall more errors than this, then it reporting that one was a non-critical error, so I think the problem may be solved.  More to come.
    Last edited by DarksideEE7 (2011-02-13 23:18:44)

  • /var/spool/imap and Time Machine

    Hi,
    after upgrading my G4 Mini from 10.5 Server to 10.5.1 Server, the machine didn't boot any more.
    When trying to restore from my Time Machine volume, I figured out that /var/spool/imap is not being backuped up by Time Machine.
    I double checked on another 10.5 server, same thing here.
    Any ideas to make Time Machine also copy /var/spool?
    Since /var/imap is on Time Machine - the db files in that directory do not contain eMail bodies, right?
    Thanks for any help - I don't want to lose my 5 year email archive...
    Cheers from Germany,
    Peter

    Dean Huxley wrote:
    I just did another Time Machine restore and this time I ended up with /var/spool/{postfix,imap} not existing and nothing working. This appears to be a common problem. I'm trying another restore from an earlier backup.
    I didn't have any luck with other restores, but I think I understand why now. Previously when the restore worked, the server was in Standard mode. A week or two later I ran into OpenDirectory problems and the Apple support guy walked me through switching to Advanced mode and how to rebuild the OD master. Everything seemed to be fine, but the Time Machine backups were no longer backing up the data in /var/spool and several other important directories. When it came time to restore, I had nothing but problems.
    It appears the "magic" works in Standard mode but not in Advanced. I guess this explains a "Not Used" in the Advanced column on page 27 of the getting started book. During Time Machine backups in Standard mode, a command called SBSBackup is run to suspend services nicely then backup service related files into a /.ServerBackups directory. When the backup is done, another SBSBackup command is run to remove the /.ServerBackups directory (as it will have already been backed up via TimeMachine.) If a restore is done, the /.ServerBackups directory is what is used to repopulate things like /var/spool, etc.
    Before anyone gets interested in reinstalling with Standard mode just to get recoverable Time Machine backups, I should point out that this SBSBackup has some "interesting" side effects. Because Time Machine runs hourly and the SBSBackup stops services, occasionally it's noticeable that something isn't running. Clients running Mail will frequently get the grey lightning bolt when they go to check mail and the service is down during the backup. Also, I think one of the times my server was corrupted was when the machine was rebooted while a /.ServerBackups was being created just before a backup. After I rebooted, some configuration files were missing and I suspect that the boot process checked this directory to automatically do restores of certain services then failed halfway through.
    To summarize, anyone using Advanced mode will have to rely on something other than Time Machine for full system backups.

  • How to limit sharing apps to only two devices? because i have an iPod touch and an iPad. i just want to limit the sharing of apps to those two.

    how to limit sharing apps to only two devices? because i have an iPod touch and an iPad. i just want to limit the sharing of apps to those two. because my brother is using my apple id too on his ipod. i want to limit it to mine only. tnx!

    You can go into settings and turn sharing off in the programs on the device you don't want to share too.

  • Mountain Lion: on the Notification Center notification and Mail:  how to limit notifications to an email account?

    Mountain Lion: on the Notification Center notification and Mail:
    how to limit notifications to an email account?
    At least, is it possible to choose what email account, the arrival of a message launch a notification.
    When running more than a dozen e-mail accounts, it may be appropriate to display only the notifications of one or two major accounts.

    Which os are you using?  Which Mail version are you using? 

  • Instance name and Var for Input Text fields

    I have several Input Text fields, as a form, linked to a PHP
    script for which I require Var's for each field.
    But I also need Instance names for each field, so I can fix
    the tabIndex.
    Yet, everytime I test my movie, the text fields have their
    Paths (_level0.fName) written in them.
    They are normally blank, and I've tried putting in some text
    of my own, but the Var name is still displayed in the text fields.
    Is there any way I can stop that from happening, and keep
    both the Instance names and Var's in-place.
    As far as I know, I need both the Instance name (for the
    tabIndex) and the Var (for the PHP script) or is there a way that
    the tabIndex and PHP script will work with either of the two?
    Thanks
    Chaz.

    Can you use a different name for ‘instance name’
    and ‘var’? That seems to solve the problem but I
    don’t know if that helps you in your situation.
    For an example;
    Instance name: test_txt
    Var: test

  • How to avoid the hard limit of 100 column and items per page?

    I have created a Form on a Table with Report. I need to create/edit approximately 175 items. The items on the Form have a limit of 100 column and items per page. What is the best way to carry the remaining items to another Form and doing an insert or update? or is the 100 column limit on the insert/update per table as well?
    Thank You.

    Hi Rick,
    The 100 item limit is on a page, not a table, so you shouldn't have any trouble with your insert or update processes.
    Here's a thought:
    Report currently has a column that links to the first page of items (page 14) with the retrieved row. Presumably you also have a Add New button on the report page that links to page 14 for a new row.
    Define a Next button on page 14 that branches to the second page of items (page 16). Also define a Previous button on page 16 to return to page 14. But page 16 would be the only page with a Save button.
    Now, if user clicks Add New, user will get a blank page 14. Once user enters the info and passes validation they click Next and will be sent to page 16 to enter the remaining info and Save.
    If user clicks one of the column links, they will be brought to page 14 with the clicked row - they can change whatever info there and click Next, or just click Next, to get to page 16. After any changes are made, they click Save.
    I'm assuming you've been thru the tutorials and realize that you'd really have two Save buttons defined for page 16 - one conditional on your primary key item having a value (existing record) and one conditional on it being null (new record) - check out the tutorials for more info, but this is how the application would know whether to run an insert process or an update process.
    Hope this all makes sense and can help,
    John

  • Signal to phone varies between 4G and 1X. Can that be improved without using antennae.

    Signal strength varies from 4G to 1X, is there an adjustment in the phone to correct or is it necessary to buy xtra antennae.

    Thank you for replying.
    Signal varies in 61822 and 33917 zip codes. The incline plane emblem next
    to battery icon never shows strength greater than just the tip of the
    indicator except when I go to Verizon corporate store where they have a
    booster. It happens in and out doors. I have not removed the sim card. This
    is a Motorola RAZR M with a number on back - CEO 168
         [image: Verizon Wireless
    Community]<http://community.verizonwireless.com>
    <http://www.verizonwireless.com/b2c/index.html>
    <http://www.verizonwireless.com/b2c/explore>
    <http://www.verizonwireless.com/b2c/store/controller?item=phoneFirst&action=viewShopIndex>
    <https://wbillpay.verizonwireless.com/vzw/nos/topline.jsp>
    <http://support.verizonwireless.com/clc/>    Re:
    Signal to phone varies between 4G and 1X. Can that be improved without
    using antennae.  created by Verizon Wireless Customer
    Support<https://community.verizonwireless.com/people/vzw_customer_support>in
    Android - View the full
    discussion<https://community.verizonwireless.com/message/1026021#1026021>

  • I have done my de authorisation limit for the year, and need to use it again, how do it?\

    i have done my de authorisation limit for the year, and need to use it again, how do i?

    Contact itunes support and ask if they will allow this

  • HT5100 How to limit the number of downloaded videos in parallel to one.i want my iPad itunesu to download only one video at once at time and when finished from downloading it to pass to the second queued one.

    How to limit the number of downloaded videos in parallel to one.i want my iPad itunesu to download only one video at once at time and when finished from downloading it to pass to the second queued one.

    @Tylerdowner: hmm.. maybe yes.. I just want to use the DOWNTHEMALL AddsOn for the saving file not the default download.. because my costumer download MP3 files and save it 3 or more files at a time so my Internet Connection goes down :( so I just want to limit them to save 1 file at a time.
    or if there is another way to limit it to 1.. please tell me :(

  • Etc,tmp, and var folder won't hide in Leopard

    Hi can someone help me hide the etc,tmp,and var folder in Leopard 10.5.4
    I have run the ls -alO / (in terminal)
    I get these results:
    total 41517
    drwxrwxr-t 34 root admin - 1224 Jul 5 11:34 .
    drwxrwxr-t 34 root admin - 1224 Jul 5 11:34 ..
    [email protected] 1 Robert admin hidden 15364 Jul 5 12:31 .DS_Store
    drwx------ 3 root admin - 102 Jun 4 09:32 .Spotlight-V100
    d-wx-wx-wt 2 root staff - 68 Jun 4 09:02 .Trashes
    -rw-r--r-- 1 root admin - 0 Jun 4 09:32 .com.apple.timemachine.supported
    drwx------ 19 root admin - 646 Jul 5 12:08 .fseventsd
    -rw-r--r-- 1 Robert admin - 166 Jul 5 12:26 .hidden
    -rw------- 1 root wheel hidden 131072 Jun 30 03:51 .hotfiles.btree
    drwxr-xr-x 2 root wheel - 68 Sep 24 2007 .vol
    drwxrwxr-x+ 104 root admin - 3536 Jul 5 11:26 Applications
    [email protected] 1 root admin hidden 44544 Jul 3 17:05 Desktop DB
    [email protected] 1 root admin hidden 2 Jun 4 21:23 Desktop DF
    drwxrwxr-x 3 root admin - 102 Jun 4 19:37 Developer
    drwxrwxr-t+ 58 root admin - 1972 Jun 30 00:20 Library
    drwxr-xr-x 2 root wheel - 68 Sep 23 2007 Network
    drwxr-xr-x 4 root wheel - 136 Jun 4 19:26 System
    drwxr-xr-x 5 root admin - 170 Jun 27 01:40 Users
    [email protected] 7 root admin hidden 238 Jul 5 12:09 Volumes
    [email protected] 40 root wheel hidden 1360 Jun 4 19:23 bin
    [email protected] 2 root admin hidden 68 Sep 23 2007 cores
    dr-xr-xr-x 2 root wheel - 512 Jul 5 12:08 dev
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 etc -> private/etc
    dr-xr-xr-x 2 root wheel - 1 Jul 5 12:08 home
    [email protected] 1 root wheel hidden 10293308 Jun 9 19:37 mach_kernel
    [email protected] 1 root wheel hidden 10742313 Jun 9 19:37 mach_kernel.ctfsys
    dr-xr-xr-x 2 root wheel - 1 Jul 5 12:08 net
    [email protected] 7 root wheel hidden 238 Jun 7 19:43 private
    [email protected] 66 root wheel hidden 2244 Jun 4 19:23 sbin
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 tmp -> private/tmp
    [email protected] 11 root wheel hidden 374 Jun 30 00:16 usr
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 var -> private/var
    As you can see...
    private/var
    private/tmp
    private/etc
    do not have the hidden flag. I have tried to run this command with no luck on all 3:
    sudo chflags hidden /private/var
    sudo chflags hidden /private/tmp
    sudo chflags hidden /private/etc
    No luck. I put in my password and restart the finder/cpu and these folders still remain visible. Anyone have any suggestions?

    *Hi Tim. Looks like I do have the developer tools but for some reason maybe not that one tool. So I downloaded your file (thank you so much for allowing me to download it and for uploading it) and put it on my desktop as you suggested. Still no luck. The files still appear eventhough the commands went through.*
    *See below (my terminal window afterwards)*
    roberts-imac:~ Robert$ sudo ~/Desktop/SetFile -a V /private/tmp
    roberts-imac:~ Robert$ sudo ~/Desktop/SetFile -a V /private/etc
    roberts-imac:~ Robert$ sudo ~/Desktop/SetFile -a V /private/var
    roberts-imac:~ Robert$ ls -alO /
    total 41517
    drwxrwxr-t 34 root admin - 1224 Jul 5 11:34 .
    drwxrwxr-t 34 root admin - 1224 Jul 5 11:34 ..
    [email protected] 1 Robert admin hidden 15364 Jul 5 18:43 .DS_Store
    drwx------ 3 root admin - 102 Jun 4 09:32 .Spotlight-V100
    d-wx-wx-wt 2 root staff - 68 Jun 4 09:02 .Trashes
    -rw-r--r-- 1 root admin - 0 Jun 4 09:32 .com.apple.timemachine.supported
    drwx------ 25 root admin - 850 Jul 5 15:22 .fseventsd
    -rw-r--r-- 1 Robert admin - 166 Jul 5 12:26 .hidden
    -rw------- 1 root wheel hidden 131072 Jun 30 03:51 .hotfiles.btree
    drwxr-xr-x 2 root wheel - 68 Sep 24 2007 .vol
    drwxrwxr-x+ 105 root admin - 3570 Jul 5 15:21 Applications
    [email protected] 1 root admin hidden 44544 Jul 3 17:05 Desktop DB
    [email protected] 1 root admin hidden 2 Jun 4 21:23 Desktop DF
    drwxrwxr-x 3 root admin - 102 Jun 4 19:37 Developer
    drwxrwxr-t+ 58 root admin - 1972 Jun 30 00:20 Library
    drwxr-xr-x 2 root wheel - 68 Sep 23 2007 Network
    drwxr-xr-x 4 root wheel - 136 Jun 4 19:26 System
    drwxr-xr-x 5 root admin - 170 Jun 27 01:40 Users
    [email protected] root admin hidden 238 Jul 5 15:23 Volumes
    [email protected] 40 root wheel hidden 1360 Jun 4 19:23 bin
    [email protected] 2 root admin hidden 68 Sep 23 2007 cores
    dr-xr-xr-x 2 root wheel - 512 Jul 5 14:51 dev
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 etc -> private/etc
    dr-xr-xr-x 2 root wheel - 1 Jul 5 14:52 home
    [email protected] 1 root wheel hidden 10293308 Jun 9 19:37 mach_kernel
    [email protected] 1 root wheel hidden 10742313 Jun 9 19:37 mach_kernel.ctfsys
    dr-xr-xr-x 2 root wheel - 1 Jul 5 14:52 net
    [email protected] 7 root wheel hidden 238 Jun 7 19:43 private
    [email protected] 66 root wheel hidden 2244 Jun 4 19:23 sbin
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 tmp -> private/tmp
    [email protected] 11 root wheel hidden 374 Jun 30 00:16 usr
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 var -> private/var
    *For some reason the entries below do not change:*
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 etc -> private/etc
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 tmp -> private/tmp
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 var -> private/var
    *I've noticed that the folders that are hidden start with an "l" and the others start with a "d". (example below)*
    lrwxr-xr-x 1 root admin - 11 Jun 4 09:04 var -> private/var (example 1)
    [email protected] 11 root wheel hidden 374 Jun 30 00:16 usr (example 2)
    *Any other guesses??? Appreciate your help on this.*
    Does that have something to do with it?

  • 2 TB MyCloud filesystems "/tmp" and "/var/log" both at 100%

    Now, this is just plain weird...  here's the output from "df -k": Filesystem 1K-blocks Used Available Use% Mounted on
    rootfs 1968336 685956 1182392 37% /
    /dev/root 1968336 685956 1182392 37% /
    tmpfs 40960 20992 19968 52% /run
    tmpfs 40960 64 40896 1% /run/lock
    tmpfs 10240 0 10240 0% /dev
    tmpfs 5120 0 5120 0% /run/shm
    tmpfs 102400 102400 0 100% /tmp                                           <<<<<<<<<<<<<---------------
    /dev/root 1968336 685956 1182392 37% /var/log.hdd
    ramlog-tmpfs 20480 20480 0 100% /var/log                             <<<<<<<<<<<<<---------------
    /dev/sda4 1918220368 26235484 1853008884 2% /DataVolume
    /dev/sda4 1918220368 26235484 1853008884 2% /CacheVolume
    /dev/sda4 1918220368 26235484 1853008884 2% /nfs/TimeMachineBackup
    /dev/sda4 1918220368 26235484 1853008884 2% /nfs/Public
    /dev/sda4 1918220368 26235484 1853008884 2% /nfs/SmartWare (pls. excuse the formatting but you can see at the arrows that /var/log and /tmp are at 100%) "/tmp" is filling up with *hundreds* of files with the form -rw------- 1 www-data www-data 0 Jul 14 00:43 sess_pdh5c9g907vqvusb3mdsvtlum3
    -rw------- 1 www-data www-data 0 Jul 14 00:43 sess_2a7v2di677ra43sh76lonm3de1
    -rw------- 1 www-data www-data 0 Jul 14 00:43 sess_o6kh3i4iggg78evs53kp6enpf6
    -rw------- 1 www-data www-data 0 Jul 14 00:43 sess_o0ahso52sef3h0if3ifpo4dno3
    -rw------- 1 www-data www-data 0 Jul 14 00:43 sess_bvn1o9v4b4ldgoq9uvtn2n24i0-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_h01fbr9o1pte3ud2s9ainth7b6 all similarly named "sess_[somethingorother] And "/var/log" is filling up due to file "/var/log/user.log", with gazillions of error messages of the form Jul 14 00:02:06 WDMyCloud REST_API[6751]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436857244438\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n and file "/var/log/apache2/error.log", that has more gazillions of error messages in it of the form [Tue Jul 14 00:07:25.715561 2015] [:error] [pid 7107] [client 192.168.1.101:3844] PHP Fatal error: Uncaught exception 'Zend\\Log\\Exception\\RuntimeException' with message 'No log writer specified' in /var/www/rest-api/lib/Zend/Log/Logger.php:245\nStack trace:\n#0 /var/www/rest-api/lib/Zend/Log/Logger.php(396): Zend\\Log\\Logger->log(4, 'Unknown: open(/...', Array)\n#1 [internal function]: Zend\\Log\\Logger::Zend\\Log\\{closure}(2, 'Unknown: open(/...', 'Unknown', 0, Array)\n#2 {main}\n thrown in /var/www/rest-api/lib/Zend/Log/Logger.php on line 245 ooookay... something has clearly gone bezoomny...  Anybody seen this?  before I go off on Yet AnotherMad Debian Bug Hunt?  

    Hey WD...  Y'all's got a BUG... When I access the MyClod from my laptop running XP with FireFox, I get the thousands of  "sess_*" files written to /tmp, and I get groups of messages of the form Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] Authentication failure for /api/2.1/rest/mediacrawler_status?_=1436938574613
    Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436938574613\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n
    Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436938574613\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n written to /var/log/user.log. But when I access it similarly from the desktop machine, also running XP with FireFox, I just get *one* of the "sess_*" whatever files written to /tmp, and just one set of messages of the form Jul 14 22:40:26 WDMyCloud REST_API[24325]: 192.168.1.100 OUTPUT DlnaServer\Controller\Database GET SUCCESS
    Jul 14 22:40:29 WDMyCloud REST_API[23952]: 192.168.1.100 OUTPUT System\Configuration\Controller\FactoryRestore GET SUCCESS
    Jul 14 22:40:29 WDMyCloud Zend\Log[23877]: 8192
    Jul 14 22:40:51 WDMyCloud REST_API[23952]: 192.168.1.100 OUTPUT Alerts\Controller\Alerts GET SUCCESS written to /var/log/user.log. So the MyClod is playing nice with some computers and not others... My guess is this could be happening more than WD knows about and could be producing all manner of mysterious behavior, since not only does it only happen on some machines but it does *not* crash the MyClod - at least not right away.  The main effect is to fill /tmp and /var/log with garbage so nothing can write to them, which will probably affect some things and not others... https://www.youtube.com/embed/2Gwnmb6P-3k  

Maybe you are looking for