/var 88% full

[screege]

Hi I am getting this emails daily, my var size is 7.8 GB and is telling me is 88% full, I have emptied most log files but do not know what i safe to empty or delete in this dir.

drwxr-xr-x 2 root root 4096 Feb 26 2009 account
-rwxr--r-- 1 root root 18432 Oct 19 08:32 aquota.user
drwxr-xr-x 10 root root 4096 Jan 26 2010 cache
drwx--x--x 71 root root 4096 Oct 19 08:42 cpanel
drwxr-xr-x 2 root root 4096 Oct 18 11:59 crash
drwxr-xr-x 2 root root 4096 Sep 3 2009 cvs
drwxr-xr-x 3 root root 4096 May 15 00:53 db
drwxr-xr-x 5 root root 4096 Oct 14 11:34 dcc
drwxr-xr-x 3 root root 4096 Jan 26 2010 empty
-rw-r--r-- 1 root root 0 May 14 2009 exim_mainlog
drwxr-xr-x 2 root root 4096 Jan 26 2010 games
drwxr-xr-x 33 root root 4096 Jan 26 2010 lib
drwxr-xr-x 2 root root 4096 Jan 26 2010 local
drwxrwxr-x 6 root lock 4096 Oct 19 08:29 lock
drwxr-xr-x 13 root root 4096 Oct 19 08:00 log
drwx------ 2 root root 16384 Nov 30 2007 lost+found
lrwxrwxrwx 1 root root 10 May 15 00:52 mail -> spool/mail
-rw-r--r-- 1 root root 0 May 14 2009 maillog
drwxr-xr-x 2 root root 4096 Dec 8 2007 mailscanner
drwxr-x--- 5 root named 12288 Oct 19 07:52 named
drwxr-xr-x 5 root root 4096 Nov 30 2007 netenberg
drwxr-xr-x 2 root root 4096 Jan 26 2010 nis
drwxr-xr-x 2 root root 4096 Jan 26 2010 opt
drwx------ 2 root root 4096 Dec 19 2009 portsentry
drwxr-xr-x 2 root root 4096 Jan 26 2010 preserve
drwxr-xr-x 3 root root 4096 Dec 15 2007 profiles
-rwxr--r-- 1 root root 1026112 Oct 19 08:23 quota.user
drwxr-xr-x 2 root root 4096 Aug 25 07:46 racoon
drwxr-xr-x 27 root root 4096 Oct 19 08:32 run
drwxr-xr-x 20 root root 4096 Jan 26 2010 spool
lrwxrwxrwx 1 root root 4 Dec 19 2009 tmp -> /tmp
drwxr-xr-x 8 root root 4096 Dec 19 2009 www
drwxr-xr-x 3 root root 4096 May 15 00:53 yp

Can anyone point me what is good to delete or empty?

regards

[Infopro]

You may find this thread useful:
/var getting full

There are many just like to be found on these forums if that one's not good enough for you.

HTH!

[screege]

thanks what I noticed is that the mysql db modsec is almost 6gb, I think is too big or is this normal?

regards

[Infopro]

Way too big, IMHO.

You can clean it this way, http://forums.cpanel.net/f189/modsec...tml#post628745
You might also want to check /etc/cron.hourly/ for a file named modsecparse.pl which should be clearing that DB I believe.

[screege]

I emptied the database files they were from 2009 I do have the modsecparse.pl in /etc/cron.hourly but doesn seem to do anything.

Regards

[Infopro]

If you're not sure modsecurity is operating as expected the easiest way to go might be to reload it via Easy Apache. No real work involved other than running EA3 and be sure you've edited your modsec2.conf properly and the rules you want to use are in place.

GL!

[screege]

Thank you!@!!!