2 TB MyCloud filesystems "/tmp" and "/var/log" both at 100%

Now, this is just plain weird…  here’s the output from “df -k”:

Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 1968336 685956 1182392 37% /
/dev/root 1968336 685956 1182392 37% /
tmpfs 40960 20992 19968 52% /run
tmpfs 40960 64 40896 1% /run/lock
tmpfs 10240 0 10240 0% /dev
tmpfs 5120 0 5120 0% /run/shm
tmpfs 102400 102400 0 100% /tmp                                           <<<<<<<<<<<<<---------------
/dev/root 1968336 685956 1182392 37% /var/log.hdd
ramlog-tmpfs 20480 20480 0 100% /var/log                             <<<<<<<<<<<<<---------------
/dev/sda4 1918220368 26235484 1853008884 2% /DataVolume
/dev/sda4 1918220368 26235484 1853008884 2% /CacheVolume
/dev/sda4 1918220368 26235484 1853008884 2% /nfs/TimeMachineBackup
/dev/sda4 1918220368 26235484 1853008884 2% /nfs/Public
/dev/sda4 1918220368 26235484 1853008884 2% /nfs/SmartWare

(pls. excuse the formatting but you can see at the arrows that /var/log and /tmp are at 100%)

“/tmp” is filling up with *hundreds* of files with the form

-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_pdh5c9g907vqvusb3mdsvtlum3
-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_2a7v2di677ra43sh76lonm3de1
-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_o6kh3i4iggg78evs53kp6enpf6
-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_o0ahso52sef3h0if3ifpo4dno3
-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_bvn1o9v4b4ldgoq9uvtn2n24i0

-rw------- 1 www-data www-data 0 Jul 14 00:43 sess_h01fbr9o1pte3ud2s9ainth7b6

all similarly named "sess_[somethingorother]

And “/var/log” is filling up due to file “/var/log/user.log”, with gazillions of error messages of the form

Jul 14 00:02:06 WDMyCloud REST_API[6751]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436857244438\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n

and file “/var/log/apache2/error.log”, that has more gazillions of error messages in it of the form

[Tue Jul 14 00:07:25.715561 2015] [:error] [pid 7107] [client 192.168.1.101:3844] PHP Fatal error: Uncaught exception ‘Zend\Log\Exception\RuntimeException’ with message ‘No log writer specified’ in /var/www/rest-api/lib/Zend/Log/Logger.php:245\nStack trace:\n#0 /var/www/rest-api/lib/Zend/Log/Logger.php(396): Zend\Log\Logger->log(4, ‘Unknown: open(/…’, Array)\n#1 [internal function]: Zend\Log\Logger::Zend\Log\{closure}(2, ‘Unknown: open(/…’, ‘Unknown’, 0, Array)\n#2 {main}\n thrown in /var/www/rest-api/lib/Zend/Log/Logger.php on line 245

ooookay… something has clearly gone bezoomny…  Anybody seen this?  before I go off on Yet Another

Mad Debian Bug Hunt?

Hi there,

I have not seen this before. Lets see if another user has seen this and can provide some insight.

yup… this was the session logon files that I kept getting a bunch of every once in awhile… 

now it could be the remote sessions…

  1. so go turn off remote access… stop the session logins.

then you can do the following…

ssh into the device and carefully type the following 

cd /tmp 

rm -f sess*

This will remove all the sess files… 

however your log files are still filled up… so go delete them or at least move or copy them somewhere else to study later.

Then do a bug hunt on why someone or why the sess* files are being created… by who?

I am curious… I have another post that ask the same question…

Hey WD…  Y’all’s got a BUG…

When I access the MyClod from my laptop running XP with FireFox, I get the thousands of  “sess_*” files written to /tmp, and I get groups of messages of the form

Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] Authentication failure for /api/2.1/rest/mediacrawler_status?_=1436938574613
Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436938574613\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n
Jul 14 22:36:26 WDMyCloud REST_API[23951]: 192.168.1.101 ORION_LOG /var/www/rest-api/api/Auth/src/Auth/User/UserSecurity.php ISAUTHENTICATED [ERROR] dbgvar0: Array\n(\n [_] => 1436938574613\n [RequestScope] => RequestScope Object\n (\n )\n\n)\n

written to /var/log/user.log.

But when I access it similarly from the desktop machine, also running XP with FireFox, I just get *one* of the “sess_*” whatever files written to /tmp, and just one set of messages of the form

Jul 14 22:40:26 WDMyCloud REST_API[24325]: 192.168.1.100 OUTPUT DlnaServer\Controller\Database GET SUCCESS
Jul 14 22:40:29 WDMyCloud REST_API[23952]: 192.168.1.100 OUTPUT System\Configuration\Controller\FactoryRestore GET SUCCESS
Jul 14 22:40:29 WDMyCloud Zend\Log[23877]: 8192
Jul 14 22:40:51 WDMyCloud REST_API[23952]: 192.168.1.100 OUTPUT Alerts\Controller\Alerts GET SUCCESS

written to /var/log/user.log.

So the MyClod is playing nice with some computers and not others…

My guess is this could be happening more than WD knows about and could be producing all manner of mysterious behavior, since not only does it only happen on some machines but it does *not* crash the MyClod - at least not right away.  The main effect is to fill /tmp and /var/log with garbage so nothing can write to them, which will probably affect some things and not others…

https://www.youtube.com/embed/2Gwnmb6P-3k

I thought this might be a FireFux-related bug since the laptop and the desktop were running different perversions of FireFux, but I upgraded FireFux on both of them and connecting from the laptop still made the MyClod go out to lunch.

So, the other difference on the laptop is, I’m running ZoneAlarm firewall, and sure enough,   if I turn off the firewall the gazillions of “sess*” files no longer get written to “/tmp” (etc.).

NTS the MyClod shouldn’t do this…  but that gives us one more datapoint, at least.  (I suppose I could try to get it fixed,  but WD and ZA support would  no doubt just get into a finger-pointing contest over it anyway like these companies always do when their toys won’t play nice together… and I’m running XP so they’d all run for cover when they heard that…  Etc… .)

I might go see if I can finger out how ZA is frying the MyClod’s brains…  In my spare time…  (yeah right).