From andrew@house.key.net.au  Fri Dec 19 17:03:31 1997
Received: from house.key.net.au (root@house.key.net.au [203.35.4.2])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id RAA08274
          for <FreeBSD-gnats-submit@freebsd.org>; Fri, 19 Dec 1997 17:03:24 -0800 (PST)
          (envelope-from andrew@house.key.net.au)
Received: (from andrew@localhost)
	by house.key.net.au (8.8.5/8.8.5) id MAA12738;
	Sat, 20 Dec 1997 12:03:13 +1100 (EST)
Message-Id: <199712200103.MAA12738@house.key.net.au>
Date: Sat, 20 Dec 1997 12:03:13 +1100 (EST)
From: Andrew <andrew@house.key.net.au>
Reply-To: andrew@ugh.net.au
To: FreeBSD-gnats-submit@freebsd.org
Subject: File shows 0 bytes but actually contains 1MB
X-Send-Pr-Version: 3.2

>Number:         5349
>Category:       kern
>Synopsis:       File shows 0 bytes but actually contains 1MB
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 19 17:10:00 PST 1997
>Closed-Date:    Thu Apr 30 12:52:23 PDT 1998
>Last-Modified:  Thu Apr 30 12:53:29 PDT 1998
>Originator:     Andrew
>Release:        FreeBSD 2.2-STABLE i386
>Organization:
UgH!
>Environment:

FreeBSD house.key.net.au 2.2-STABLE FreeBSD 2.2-STABLE #0: Tue Aug 12 14:11:49 E
ST 1997     andrew@house.key.net.au:/usr/src/sys/compile/HOUSE  i386

>Description:

We had a user trying to check their mail via POP (we use Qpop). He complained that his email client would tell him he had 3 messages but when he tried to check them it would sit there for half an hour and then time out. On checking the logs I founjd:

Dec 20 10:16:10 ***** popper[11201]: *****@*****.******.key.net.au: -ERR SIGHUP or SIGPIPE flagged

(names removed)

I used ls -s to see how large his mail file was and it was reported as 0 bytes. I sent the user a test email. I ran ls -s again and the file was still reported as 0 bytes. I mored the file and there was a number of messages, including my test message. When I quit more I tried ls -s again. The file was now 1132 K (approx).

>How-To-Repeat:

	

>Fix:
	
	

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: phk 
State-Changed-When: Thu Apr 30 12:52:23 PDT 1998 
State-Changed-Why:  
more data would be needed for analysis, but the resulting size of 1132K 
hints that the system was shuffling temp files under the covers... 
>Unformatted:
