Shared drive on LAN showing completely full, when only 45GB out of 276GB used? *SCREENCAP INSIDE*

[Stattlich]

SOLVED! THANKS FOR LOOKING --- Interesting discussion of "Alternate Data Streams" that a Macintosh generates on an NTFS drive further down.

-----------------------

For those of you who have followed me through all my shared drive calamities lately, I'm hoping this is the last one of three so far that have left me scratching my head.

As described in the title and summary, I have a 300GB RAID1 shared drive using two Seagate 300GB SATA drives using the nForce RAID setup that otherwise works flawlessly. But after a handful of LAN users have backed up their data using the Windows Backup utility, scheduled to run every night and replace their data with every disk write, 46GB of data now on the shared drive is making the RAID drive show completely full (well, 8K free). Where did the rest of my space go? There are no hidden files... doing a 'Properties' check on the folders existing on the drive say 46GB of total data. Windows says the drive is used up and to insert additional media.

Here is a screencap of the situation.

Wtf is going on? Anybody seen this one before? Thanks once again in advance- you guys have been a big help in the last couple issues.

 

[razor2025]

I'm a bit n00b about this, but would it be that you've setup quota system on that drive? Maybe it's displaying only "your" quota and not the rest of the drive itself. It's a rough guess. I'm not sure if that's even possible if you login as the sys admin.

 

[Stattlich]

Good guess and thanks for the response, but logging in under admin to the shared drive PC (XP Pro), quota management is not enabled.

 

[razor2025]

Maybe it's using a 3rd party software for quota management? Good luck on caliming those bits. Maybe you can sue the HDD manufacture for false size advertisement

 

[Stattlich]

There is no third-party quota software on this machine- I built it myself. It has Norton Anti-Virus and that's about it.

Drive validity is not in question.

 

[Stattlich]

Tuesday morning bumpage!

 

[Stattlich]

TTT

 

[RebateMonger]

What does the Windows Disk Management Control Panel say about the drive (drive capacity, free space, etc.)?

 

[Stattlich]

I'll be on-site to check that out Thursday- thanks for the suggestion.

Any others?

 

[Stattlich]

TTT

 

[Cloud Strife]

Someone uploaded massive porn to your RAID without letting you know?

What does the Windows Disk Management Control Panel say about the drive (drive capacity, free space, etc.)?

Do that first then let us know. You might try posting this in General Hardware as it seems more of a hardware problem than network.

 

[Stattlich]

Alright will do.

 

[Stattlich]

Originally posted by: Cloud Strife
Someone uploaded massive porn to your RAID without letting you know?

What does the Windows Disk Management Control Panel say about the drive (drive capacity, free space, etc.)?

Do that first then let us know. You might try posting this in General Hardware as it seems more of a hardware problem than network.

Definitely not pr0n- this is a church!

Here is a screencap of the situation. The Assets file folder is the only one on the shared drive that has any data within it. Note the properties of that and the properties of the shared drive itself. There really is NO data anywhere else but the Assets file folder.

Bizarre, eh?

 

[RebateMonger]

Originally posted by: Stattlich

Originally posted by: Cloud Strife
Someone uploaded massive porn to your RAID without letting you know?

Definitely not pr0n- this is a church!

A new client, a prestigious LAW FIRM, showed me their RAID array, which had 32 GIGABYTES of "undeletable" garbage on it. Somebody had mis-configured their FTP services and had left an anonymous public FTP site available on the Internet. Hackers or 'Bots had put the 32Gigabytes of junk on it using illegal file names, which are only deletable using POSIX commands.

So, just because it's a church doesn't mean it couldn't have Gigabytes of porn put on it by hackers.

 

[Stattlich]

Yikes! Definitely possible... but not in my case. Just figured it out.

Alright, let it be known that WindowsXP doesn't always pick up hidden files and folders of data copied from Apple machines. What Windows said to be a folder 1.45GB in size turned out to be 48GB+ of data. I deleted a folder full of Mac files and suddenly the shared drive opened wide up- no hardware issues.

Thanks for everyone's support!

 

[RebateMonger]

This has to do with "Alternate Data Streams" that a Macintosh generates on an NTFS drive.

Discussion of NTFS Alternate Data Streams and the Macintosh

"Alarmingly, files with an ADS are almost impossible to detect using native file browsing techniques like command line or windows explorer. In our example, the file size of calc.exe will show as the original size of 90k regardless of the size of the ADS anyfile.exe. The only indication that the file was changed is the modification time stamp, which can be relatively innocuous."

 

[Stattlich]

Wow, thanks for sharing that... is this just a general explanation of some incompatibilities of some Apple files with NTFS, or do you think the source Mac I was using was compromised at some point earlier?

 

[RebateMonger]

Originally posted by: Stattlich
Wow, thanks for sharing that... is this just a general explanation of some incompatibilities of some Apple files with NTFS, or do you think the source Mac I was using was compromised at some point earlier?

Nah, I just think it's something that Macs do when writing to NTSF shares and probably why you had problems reading the "true" size of the folders.

You'd have to talk to a Mac expert for any details. That's definitely not me.

 

[Stattlich]

Ok good. Well thank you again for the heads up on that- good info to know (that I'd wager most here don't know about either).

The two source Macs, that were being used as NAS servers, are being retired. So hopefully that's the last that anybody there has to screw with them.