Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Can't login as root, huge file spawning

Can't login as root, huge file spawning
Thread Tools
Grizzled Veteran
Join Date: Dec 2001
Location: Land of Enchantment
Status: Offline
Reply With Quote
Dec 26, 2011, 08:27 PM
 
I have a file that has appeared yesterday in users/private/var that was 106 G, totally screwing backup on an external. Omnisweeper sees it, but when I selected it, and clicked on Delete, it almost doubles! I'm posting OSW's screenshot. Now, before this happened, just now, nothing happened when I tried to delete the thing yesterday night and no system change initiated by me has happened in the meantime. I tried to login as root, which I've done before for similar reasons, and followed the instructions, but at step 5 'Choose Edit > Enable Root User.' that option did not appear. So this has me creeped out, a process that spawns 100 G files at a time!!?? I have my screenshot, how do I upload the tiff?
( Last edited by jmiddel; Dec 26, 2011 at 09:00 PM. )
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Dec 27, 2011, 12:22 AM
 
You don't need to login as root to delete files owned by root, you can use sudo for that. Before you delete the file, I'd check your logs to see if you can figure out what is writing to them so aggressively so that you can deal with the root problem rather than its main symptom.
     
Administrator
Join Date: Jun 2000
Location: California
Status: Offline
Reply With Quote
Dec 27, 2011, 03:19 AM
 
I disagree. If he runs out of free space on his boot HD, this will get a lot harder to fix. If he's burned 100+ GB already, he could be getting close to crunch time. He needs to be able to wipe that file before investigating the clues. In case the investigation goes slowly.

The login instructions for root vary somewhat by OS version. It would be helpful to know your OS X version. And the filename of the nuisance file. Your machine version (and HD size) would be nice to know too.
     
Moderator
Join Date: May 2001
Location: Hilbert space
Status: Offline
Reply With Quote
Dec 27, 2011, 04:05 AM
 
You should definitely tell us the name of the file. I've had a problem like this on my parents' machine: a log file was growing until all available space had been eaten up. But unless you solve the root cause of the problem, the file may appear again and take over all space.
I don't suffer from insanity, I enjoy every minute of it.
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Dec 27, 2011, 05:08 AM
 
Originally Posted by reader50 View Post
I disagree. If he runs out of free space on his boot HD, this will get a lot harder to fix. If he's burned 100+ GB already, he could be getting close to crunch time. He needs to be able to wipe that file before investigating the clues. In case the investigation goes slowly.

The login instructions for root vary somewhat by OS version. It would be helpful to know your OS X version. And the filename of the nuisance file. Your machine version (and HD size) would be nice to know too.
Oh, I meant that he shouldn't just delete the file and carry on, but he should definitely delete it ASAP
     
P
Moderator
Join Date: Apr 2000
Location: Gothenburg, Sweden
Status: Offline
Reply With Quote
Dec 27, 2011, 11:04 AM
 
This sounds like a disk directory problem. What does Disk Utility say?
The new Mac Pro has up to 30 MB of cache inside the processor itself. That's more than the HD in my first Mac. Somehow I'm still running out of space.
     
jmiddel  (op)
Grizzled Veteran
Join Date: Dec 2001
Location: Land of Enchantment
Status: Offline
Reply With Quote
Dec 27, 2011, 09:08 PM
 
Problem was a Photoshop thing, the file in question was 2/3ds 'asl' style files, 1/3d the relevant log, I think, since it does not open. It's name: kernel.log.0. The PS file is called: 'asl' The 2nd copy I have deleted using Whatsize WhatSizeMac which does allow the enabling of sudo via a click and PW. Omnisweeper does not, as I found out in 5/2010 on this forum. I will try to locate the original kernel.log file (without the .0) which was accessible, if find, will post.

I've tried to post screenshot, but am missing something, for following the Insert Image does not work. Why can't I just either drag/drop. or be able to select the image from my Desktop?
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Dec 27, 2011, 09:15 PM
 
The contents of your kernel log file can be accessed in your Console application, located in your Utilities folder.
     
Professional Poster
Join Date: Feb 2000
Location: Nashua NH, USA
Status: Offline
Reply With Quote
Dec 27, 2011, 10:37 PM
 
The forums don't directly host images you'll have to find a 3rd party or host it on a web server you have, I know comcast service comes with webspace
     
jmiddel  (op)
Grizzled Veteran
Join Date: Dec 2001
Location: Land of Enchantment
Status: Offline
Reply With Quote
Dec 27, 2011, 11:14 PM
 
This a portion of the 180 Word pages of this log. This seems to be the first mention of 'asl'. I'll be happy to send the whole thing along as a Word file.

ec 23 14:29:23 jmiddel-10 kernel[0]:
Dec 23 14:29:44: --- last message repeated 25321 times ---
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.533 E [core-utilities:1073] Loading of skin file(views/boxmodel_start_page.xml) failed '/Users/jmiddel/Desktop/Spotify.app/Contents/Resources/views/boxmodel_start_page.xml'(basepath: )
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.533 E [BoxModel.cpp:2817] Boxmodel Parse Error: XML: line 1, col 0: no element found
Dec 23 14:29:44 jmiddel-10 kernel[0]:
Dec 23 14:29:45: --- last message repeated 572 times ---
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.895 I [attributed-string-handler:211] Couldn't find wanted font, using default font...
Dec 23 14:29:44 jmiddel-10 kernel[0]:
Dec 23 14:29:45: --- last message repeated 23 times ---
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.912 I [IntroFlowDataSource.cpp:840] LightboxFlowStepHulk::onSocialEvent() is_social=1, is_social_fb=1
Dec 23 14:29:44 jmiddel-10 kernel[0]:
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.913 E [core-utilities:1073] Loading of skin file(views/intro_flow.xml) failed '/Users/jmiddel/Desktop/Spotify.app/Contents/Resources/views/intro_flow.xml'(basepath: )
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.913 E [BoxModel.cpp:2817] Boxmodel Parse Error: XML: line 1, col 0: no element found
Dec 23 14:29:44 jmiddel-10 [0x0-0x206206].com.spotify.client[6867]: 21:29:44.913 I [attributed-string-handler:211] Couldn't find wanted font, using default font...
Dec 23 14:29:44 jmiddel-10 kernel[0]:
Dec 23 14:30:11 jmiddel-10 kernel[0]:
Dec 23 14:30:11 jmiddel-10 kernel[0]:
Dec 23 14:30:17: --- last message repeated 6526 times ---
Dec 23 14:30:17 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 10 seconds
Dec 23 14:30:17 jmiddel-10 kernel[0]:
Dec 23 14:30:47: --- last message repeated 37042 times ---
Dec 23 14:30:47 jmiddel-10 kernel[0]:
Dec 23 14:31:17: --- last message repeated 35025 times ---
Dec 23 14:31:16 jmiddel-10 kernel[0]:
Dec 23 14:31:47: --- last message repeated 33996 times ---
Dec 23 14:31:47 jmiddel-10 kernel[0]:
Dec 23 14:32:17: --- last message repeated 33286 times ---
Dec 23 14:32:17 jmiddel-10 kernel[0]:
Dec 23 14:32:47: --- last message repeated 34592 times ---
Dec 23 14:32:46 jmiddel-10 kernel[0]:
Dec 23 14:32:49: --- last message repeated 2476 times ---
Dec 23 14:32:48 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 10 seconds
Dec 23 14:32:48 jmiddel-10 kernel[0]:
Dec 23 14:33:19: --- last message repeated 35215 times ---
Dec 23 14:33:19 jmiddel-10 kernel[0]:
Dec 23 14:33:32: --- last message repeated 15583 times ---
Dec 23 14:33:32 jmiddel-10 ntpd[44]: time reset +0.338556 s
Dec 23 14:33:32 jmiddel-10 kernel[0]:
Dec 23 14:34:02: --- last message repeated 34477 times ---
Dec 23 14:34:01 jmiddel-10 kernel[0]:
Dec 23 14:34:32: --- last message repeated 34645 times ---
Dec 23 14:34:32 jmiddel-10 kernel[0]:
Dec 23 14:35:02: --- last message repeated 31531 times ---
Dec 23 14:35:02 jmiddel-10 kernel[0]:
Dec 23 14:35:25: --- last message repeated 22588 times ---
Dec 23 14:35:25 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 6 seconds
Dec 23 14:35:25 jmiddel-10 kernel[0]:
Dec 23 14:35:55: --- last message repeated 25316 times ---
Dec 23 14:35:55 jmiddel-10 kernel[0]:
Dec 23 14:36:25: --- last message repeated 20424 times ---
Dec 23 14:36:24 jmiddel-10 kernel[0]:
Dec 23 14:36:55: --- last message repeated 17141 times ---
Dec 23 14:36:55 jmiddel-10 kernel[0]:
Dec 23 14:37:25: --- last message repeated 16050 times ---
Dec 23 14:37:24 jmiddel-10 kernel[0]:
Dec 23 14:37:55: --- last message repeated 15305 times ---
Dec 23 14:37:55 jmiddel-10 kernel[0]:
Dec 23 14:38:25: --- last message repeated 15044 times ---
Dec 23 14:38:25 jmiddel-10 kernel[0]:
Dec 23 14:38:55: --- last message repeated 15298 times ---
Dec 23 14:38:54 jmiddel-10 kernel[0]:
Dec 23 14:39:25: --- last message repeated 15676 times ---
Dec 23 14:39:24 jmiddel-10 kernel[0]:
Dec 23 14:39:40: --- last message repeated 8138 times ---
Dec 23 14:39:40 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 10 seconds
Dec 23 14:39:40 jmiddel-10 kernel[0]:
Dec 23 14:40:10: --- last message repeated 16264 times ---
Dec 23 14:40:09 jmiddel-10 kernel[0]:
Dec 23 14:40:40: --- last message repeated 15585 times ---
Dec 23 14:40:39 jmiddel-10 kernel[0]:
Dec 23 14:41:10: --- last message repeated 16367 times ---
Dec 23 14:41:09 jmiddel-10 kernel[0]:
Dec 23 14:41:40: --- last message repeated 19686 times ---
Dec 23 14:41:39 jmiddel-10 kernel[0]:
Dec 23 14:42:10: --- last message repeated 21464 times ---
Dec 23 14:42:10 jmiddel-10 kernel[0]:
Dec 23 14:42:40: --- last message repeated 23466 times ---
Dec 23 14:42:39 jmiddel-10 kernel[0]:
Dec 23 14:43:10: --- last message repeated 25418 times ---
Dec 23 14:43:09 jmiddel-10 kernel[0]:
Dec 23 14:43:13: --- last message repeated 3917 times ---
Dec 23 14:43:13 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 10 seconds
Dec 23 14:43:13 jmiddel-10 kernel[0]:
Dec 23 14:43:26: --- last message repeated 11458 times ---
Dec 23 14:43:26 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 8 seconds
Dec 23 14:43:26 jmiddel-10 kernel[0]:
Dec 23 14:43:56: --- last message repeated 27937 times ---
Dec 23 14:43:56 jmiddel-10 kernel[0]:
Dec 23 14:44:26: --- last message repeated 28124 times ---
Dec 23 14:44:25 jmiddel-10 kernel[0]:
Dec 23 14:44:56: --- last message repeated 28412 times ---
Dec 23 14:44:56 jmiddel-10 kernel[0]:
Dec 23 14:45:26: --- last message repeated 29337 times ---
Dec 23 14:45:25 jmiddel-10 kernel[0]:
Dec 23 14:45:56: --- last message repeated 28818 times ---
Dec 23 14:45:55 jmiddel-10 kernel[0]:
Dec 23 14:45:57: --- last message repeated 1432 times ---
Dec 23 14:45:57 jmiddel-10 com.apple.launchd[1] (com.apple.aslmanager): Throttling respawn: Will start in 10 seconds
Dec 23 14:45:57 jmiddel-10 kernel[0]:
Dec 23 14:46:27: --- last me
     
Administrator
Join Date: Jun 2000
Location: California
Status: Offline
Reply With Quote
Dec 28, 2011, 02:29 AM
 
Looks like aslmanager is a new logging API. And it has intermittent bugs. info link

Besides what they mention, you could nuke it for real. The aslmanager daemon lives at /usr/sbin/aslmanager. You could rename it, move it elsewhere, or delete it. Then reboot. Apparently you'll lose some logs in the future, but the vampire will be staked properly.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -4. The time now is 04:17 AM.
All contents of these forums © 1995-2014 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.8 © 2000-2014, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2