Also der Reihe nach ...
lsof +L1 2>/dev/null| tail -n +2 |sort -k 10,10 | uniq -f 9| awk '{sum +=$7} END {OFMT = "%.0f"; print sum}'
gibt
285928428290
aus.
mount
gibt
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) udev on /dev type devtmpfs (rw,nosuid,relatime,size=3995728k,nr_inodes=998932,mode=755) devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000) tmpfs on /run type tmpfs (rw,nosuid,noexec,relatime,size=803188k,mode=755) /dev/sda2 on / type ext4 (rw,relatime,errors=remount-ro,data=ordered) securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime) tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev) tmpfs on /run/lock type tmpfs (rw,nosuid,nodev,noexec,relatime,size=5120k) tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755) cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd) pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime) efivarfs on /sys/firmware/efi/efivars type efivarfs (rw,nosuid,nodev,noexec,relatime) cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices) cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer) cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event) cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio) cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset) cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpu,cpuacct) cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls,net_prio) cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory) cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,pids) cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb) systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=35,pgrp=1,timeout=0,minproto=5,maxproto=5,direct) debugfs on /sys/kernel/debug type debugfs (rw,relatime) hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime) mqueue on /dev/mqueue type mqueue (rw,relatime) fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime) /dev/sda1 on /boot/efi type vfat (rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro) /dev/md0 on /Backup type ext4 (rw,nosuid,nodev,noexec,relatime,stripe=384,data=ordered) /dev/md1 on /NAS type ext4 (rw,nosuid,nodev,noexec,relatime,stripe=384,data=ordered) lxcfs on /var/lib/lxcfs type fuse.lxcfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other) binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,relatime) tracefs on /sys/kernel/debug/tracing type tracefs (rw,relatime) tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=803188k,mode=700,uid=1000,gid=1000) tmpfs on /run/user/1002 type tmpfs (rw,nosuid,nodev,relatime,size=803188k,mode=700,uid=1002,gid=27)
aus. NAS ist also gemountet und Backup ist so klein, weil ich das raid noch nicht nutze ... das past also so ☺
Und
find . -type f -printf '%TY-%Tm-%Td %TH:%TM: %p\n'| sort -n | tail -n20
gibt
2015-08-17 17:30: ./.profile 2015-10-22 19:15: ./.bashrc 2017-08-02 17:21: ./sctl_sdb.txt 2017-08-02 17:21: ./sctl_sdc.txt 2017-08-02 17:21: ./sctl_sdd.txt 2017-08-02 18:07: ./.lesshst 2017-08-02 18:10: ./sctl_sdc-l.txt 2017-10-08 00:49: ./.selected_editor 2018-01-04 00:03: ./.viminfo 2018-01-04 00:35: ./.mysql_history 2018-01-04 03:52: ./.rnd 2018-01-04 03:58: ./.nano/search_history 2018-01-08 22:39: ./.bash_history
ah und dazu noch
insgesamt 124K drwx------ 3 root root 4,0K Jan 4 00:35 . drwxr-xr-x 25 root root 4,0K Dez 25 23:49 .. -rw------- 1 root root 51K Jan 8 22:47 .bash_history -rw-r--r-- 1 root root 3,1K Okt 22 2015 .bashrc -rw------- 1 root root 33 Aug 2 18:07 .lesshst -rw------- 1 root root 1,1K Jan 4 00:35 .mysql_history drwxr-xr-x 2 root root 4,0K Aug 23 22:09 .nano -rw-r--r-- 1 root root 148 Aug 17 2015 .profile -rw------- 1 root root 1,0K Jan 4 03:52 .rnd -rw-r--r-- 1 root root 5,2K Aug 2 17:21 sctl_sdb.txt -rw-r--r-- 1 root root 1,2K Aug 2 18:10 sctl_sdc-l.txt -rw-r--r-- 1 root root 5,3K Aug 2 17:21 sctl_sdc.txt -rw-r--r-- 1 root root 9,8K Aug 2 17:21 sctl_sdd.txt -rw-r--r-- 1 root root 66 Okt 8 00:49 .selected_editor -rw------- 1 root root 799 Jan 4 00:03 .viminfo
ist also auch nicht sonderlich auffällig...
Ich habe keine Idee mehr! ... bitte helft mir 😢