I ran some code that caused root file system to run out of space; the code then crashes and the file is deleted. I need to find out which file is being created there.
How can I quickly (while the program is running, i.e., I only have ~30 seconds) find all files in the given file system that are greater than 1 GB and modified or created just now?
(I'm guessing python's sqlite3 uses root file system for something, but obviously without seeing the file I have no way of knowing.)
lsof
to list all files that the program opens for writing? See for example lsof: show files open as read-writepython 24853 max 6u REG 8,1 3821580012 788060 /var/tmp/etilqs_xARlZag1jj945jH (deleted)
. It's also far bigger than the space on the root filesystem. Still, the root filesystem slowly reduces its free space until it hits 0.