High unmanaged disk usage on /ngfw, but not ng-syslog (deleted)?

[eeebbunee]

Hello Professionals,

I am having an 'High unmanged disk usage on /ngfw' issue, and after I googling, I got the solution. (https://bst.cisco.com/bugsearch/bug/CSCwb34240) 

However, unlike others, my case is different. 
When I do 'lsof | grep deleted', I got all deleted files excep ng-syslog things:

In my case, is there any other solution to reduce my /ngfw disk?

root@firepower:/# lsof | grep deleted
nscd 5803 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5805 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5806 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5807 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5808 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5809 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
nscd 5803 5810 nobody 5u REG 0,14 217032 18755 /run/nscd/dbBXnJ4j (deleted)
mysqld 8206 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 7400 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 7400 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 7400 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 7400 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 7400 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8257 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8257 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8257 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8257 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8257 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8258 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8258 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8258 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8258 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8258 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8259 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8259 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8259 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8259 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8259 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8260 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8260 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8260 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8260 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8260 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8261 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8261 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8261 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8261 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8261 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8262 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8262 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8262 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8262 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8262 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8263 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8263 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8263 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8263 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8263 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8264 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8264 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8264 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8264 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8264 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8265 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8265 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8265 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8265 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8265 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8266 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8266 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8266 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8266 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8266 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8268 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8268 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8268 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8268 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8268 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8269 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8269 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8269 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8269 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8269 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8270 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8270 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8270 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8270 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8270 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8271 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8271 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8271 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8271 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8271 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8272 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8272 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8272 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8272 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8272 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8273 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8273 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8273 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8273 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8273 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8274 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8274 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8274 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8274 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8274 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8275 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8275 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8275 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8275 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8275 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8276 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8276 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8276 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8276 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8276 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8277 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8277 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8277 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8277 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8277 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8352 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8352 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8352 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8352 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8352 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8404 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8404 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8404 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8404 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8404 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8429 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8429 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8429 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8429 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8429 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8591 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8591 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8591 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8591 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8591 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8595 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8595 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8595 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8595 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8595 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8599 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8599 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8599 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8599 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8599 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8601 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8601 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8601 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8601 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8601 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8604 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8604 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8604 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8604 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8604 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8609 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8609 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8609 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8609 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8609 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8686 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8686 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8686 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8686 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8686 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8795 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8795 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8795 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8795 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8795 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8986 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8986 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8986 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8986 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8986 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 8997 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 8997 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 8997 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 8997 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 8997 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 9445 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 9445 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 9445 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 9445 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 9445 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 10335 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 10335 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 10335 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 10335 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 10335 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 10337 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 10337 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 10337 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 10337 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 10337 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
mysqld 8206 15227 mysql 4u REG 0,15 0 26981 /var/volatile/tmp/ibnExrMf (deleted)
mysqld 8206 15227 mysql 7u REG 0,15 0 26982 /var/volatile/tmp/ibDMMazM (deleted)
mysqld 8206 15227 mysql 8u REG 0,15 0 26983 /var/volatile/tmp/ibJl5Tlj (deleted)
mysqld 8206 15227 mysql 9u REG 0,15 0 26985 /var/volatile/tmp/ib5ehwWm (deleted)
mysqld 8206 15227 mysql 13u REG 0,15 0 26986 /var/volatile/tmp/ibhXKNKT (deleted)
httpd 9024 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9260 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9260 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9260 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9260 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9260 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9260 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9261 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9261 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9261 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9261 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9261 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9261 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9262 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9262 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9262 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9262 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9262 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9262 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9263 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9263 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9263 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9263 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9263 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9263 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9264 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9264 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9264 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9264 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9264 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9264 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9265 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9265 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9265 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9265 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9265 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9265 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9266 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9266 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9266 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9266 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9266 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9266 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9267 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9267 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9267 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9267 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9267 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9267 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9268 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9268 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9268 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9268 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9268 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9268 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9269 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9269 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9269 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9269 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9269 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9269 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9270 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9270 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9270 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9270 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9270 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9270 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9271 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9271 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9271 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9271 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9271 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9271 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9272 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9272 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9272 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9272 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9272 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9272 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9273 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9273 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9273 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9273 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9273 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9273 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9274 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9274 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9274 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9274 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9274 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9274 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9275 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9275 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9275 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9275 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9275 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9275 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9276 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9276 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9276 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9276 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9276 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9276 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9277 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9277 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9277 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9277 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9277 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9277 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9278 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9278 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9278 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9278 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9278 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9278 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9279 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9279 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9279 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9279 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9279 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9279 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9280 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9280 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9280 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9280 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9280 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9280 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9281 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9281 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9281 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9281 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9281 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9281 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9282 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9282 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9282 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9282 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9282 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9282 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9283 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9283 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9283 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9283 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9283 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9283 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9284 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9284 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9284 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9284 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9284 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9284 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 9285 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 9285 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 9285 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 9285 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 9285 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 9285 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10977 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10977 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10977 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10977 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10977 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10977 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10978 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10978 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10978 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10978 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10978 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10978 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10979 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10979 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10979 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10979 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10979 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10979 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10980 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10980 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10980 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10980 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10980 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10980 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10981 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10981 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10981 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10981 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10981 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10981 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10982 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10982 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10982 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10982 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10982 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10982 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10983 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10983 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10983 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10983 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10983 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10983 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10984 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10984 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10984 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10984 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10984 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10984 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9024 10985 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9024 10985 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9024 10985 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9024 10985 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
httpd 9024 10985 daemon 17w REG 0,14 0 29705 /run/apache2/rewrite-map.9024 (deleted)
httpd 9024 10985 daemon 21wW REG 0,14 0 29709 /run/apache2/mpm-accept.9024 (deleted)
httpd 9258 daemon 12w REG 0,14 0 29701 /run/apache2/authdigest-client.9024 (deleted)
httpd 9258 daemon 13w REG 0,14 0 29450 /run/apache2/ssl-cache.9024 (deleted)
httpd 9258 daemon 15w REG 0,14 0 29702 /run/apache2/authdigest-opaque.9024 (deleted)
httpd 9258 daemon 16w REG 0,14 0 29703 /run/apache2/proxy.9024 (deleted)
snort 21025 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21110 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21111 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21227 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21230 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21231 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21232 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21025 21233 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21100 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21101 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21192 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21195 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21196 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21197 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21026 21198 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21107 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21108 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21205 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21207 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21210 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21211 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so
snort 21027 21212 root mem REG 8,4 115000 1595252 /ngfw/var/sf/detection_engines/983f8ac8-dcef-11e8-b404-0f9ba8ee8109/so_rules/deleted.so

Thank you for your response.

[Marius Gunnerud]

Just because ng-syslog is not present does not mean logrotate is not the issue.  I have seen several issues with high unmanaged disk space and ng-syslog as well as /ngfw did not show as using a lot of disk space.  Checke the following and implement workaround if the /ngfw is missing from the path in the files.

cat /ngfw/etc/logrotate-5min.d/pm.logrotate
cat /ngfw/etc/logrotate-size.d/pm.logrotate

in each case I have seen, the logrotate-5min.d pm.logrotate file had the incorrect path while logrotate-size.d pm.logrotate file was correct. Check both locations to make sure the path is correct and then implement the workaround where the path is not correct by either using echo as in the bug you posted or vi to edit the file.

Edit the first line to be /ngfw/var/log/process_std*.log {

admin@fpr:logrotate-5min.d# sudo su -

root@fpr:logrotate-5min.d# sudo vim pm.logrotate
/ngfw/var/log/process_std*.log {
missingok
compress
copytruncate
maxsize 1G
rotate 4
sharedscripts
}

Now remove the pm.logrotate file from both locations and restart syslog-ng process and then initiate a logrotate job.

rm -f /ngfw/etc/logrotate.d/pm.logrotate
rm -f /ngfw/etc/logrotate-size.d/pm.logrotate

/ngfw/etc/rc.d/init.d/syslog-ng restart

logrotate -v /ngfw/etc/logrotate-5min.d/pm.logrotate

[eeebbunee]

Hello @Marius Gunnerud ,

Thank you for your kind response.

When I check my FTD, on /ngfw/etc, there are 
 - logrotate-size.d
 - logrotate.d

each directory has pm.logrotate (directory path is correct), but unfortunately, I couldn't find logrotate-5min.d at all. (find | grep logrotate-5min)

Should I search logrotate-5min before I try?

Thank you.

[Marius Gunnerud]

I have asked a few times now, please let us know what version your FTDs are running.

We are running 7.2.4.1 at our clients and if you have the same, you are missing the logrotate-5min files and might be the reason you are seeing high unmanaged disk space usage.  Have you are TAC removed these files?

The following are the logrotate files we have at one client site and yours should match this.

admin@FTD:/$ ls /ngfw/etc | grep logrotate
logrotate-5min.conf
logrotate-5min.d
logrotate-size.conf
logrotate-size.d
logrotate.conf

[eeebbunee]

Mine is 6.2.3. 
When I contacted TAC, the engineer was checking few things (don't know what he checked exactly) and he said he couldn't catch the issue.... he said it seems fine. Ever since then I haven't created the ticket.
Maybe my version doesn't have logrotate-5min...?

Thank you.

[Marvin Rhoads]

You can also check for large Geodb files. Use the workaround I posted at the following thread for that issue:

https://community.cisco.com/t5/network-security/increase-cisco-ftd-and-fmc-default-disk-size-in-vmware/m-p/4893971#M1103030

[Marius Gunnerud]

That FTD version is old and really needs to be upgraded, there are no more software updates for that version.  try forcing a logrotate job to see if that clears out some of the used disk space.

[eeebbunee]

I will try and get back, appreciate you.