Preview Tool

Cisco Bug: CSCvu12765 - /var/data/cores/ reports 65% usage (29Gb) but then is empty. Huge swap file found there

Last Modified

Jun 17, 2020

Products (1)

  • Cisco Firepower 9300 Series

Known Affected Releases


Description (partial)

internal investigation

We can see that "df -k" is reporting that we have 65% usage on /var/data/cores/ partition.
However, if we have a  look of that folder, we can see that is empty.
Having a look into the troubleshooting files, we can find a .swapfile on that folder.

root@firepower# df -hT
Filesystem     Type     Size  Used Avail Use% Mounted on
overlay        overlay  312G   31G  281G  10% /
tmpfs          tmpfs     64M     0   64M   0% /dev
tmpfs          tmpfs    126G     0  126G   0% /sys/fs/cgroup
/dev/sda6      xfs       40G  4.7G   36G  12% /usr
tmpfs          tmpfs    126G  252K  126G   1% /run
shm            tmpfs     22G  308M   22G   2% /dev/shm
tmpfs          tmpfs    126G  4.0K  126G   1% /var/config
tmpfs          tmpfs    126G   28M  126G   1% /var/volatile/tmp
/dev/sda5      ext3      46G   29G   16G  65% /var/data/cores
/dev/sda2      ext3     1.9G  3.6M  1.8G   1% /opt/cisco/config/host-common
/dev/sda3      ext3     4.5G   22M  4.3G   1% /opt/cisco/csp/applications/cisco-ftd.
tmpfs          tmpfs    126G     0  126G   0% /sys/firmware

root@firepower:cores# ls -lah
total 4.0K
drwxr-xr-x 2 root root 4.0K Oct 11  2019 .
drwxr-xr-x 3 root root   19 Oct 11  2019 ..

customer running FTD 6.4.0 version
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.