/Var Out of Space on FreeNas 8.04 (as Reported by Syslogd)

So I started getting failures on my backup jobs due to the inability of the backup server to connect to my FreeNAS server. In the /log for the FreeNAS FreeBSD server, I find that Syslogd is reporting that /Var is full.

Getting into the server I run:

#>df -h /var

Filesystem Size Used Avail Capacity Mounted on
/dev/md2 149M 149M -12M 109% /var

I get that output saying that the /Var is 149mb and that its 109% capacity. Wtf? What’s going on in there?
I assumed (correctly) that it was a log problem, so I wanted to get a summary of the folders size in /var/log:

#>du -h /var/log/

512B /var/log/lighttpd
512B /var/log/samba/cores/winbindd
512B /var/log/samba/cores/smbd
512B /var/log/samba/cores/nmbd
2.0K /var/log/samba/cores
140M /var/log/samba
512B /var/log/proftpd
140M /var/log/

SAMBA! Why! After all we’ve been through together!!
Looks like my samba logs are clogged up- so I looked in there and found the large log:

#>ls -lt

-rw-r–r–  1 root  wheel  146591723 May  2 08:34 log.nmbd

Thats a pretty big file for a 149mb partition!
I decided to see what was getting logged in there, so I ran:

#>tail -f ./log.nmbd

process_name_registration_request: unicast name registration request received for name ILO2M202501BU<00> from IP 10.xx.xx.xx on subnet UNICAST_SUBNET. Error – should be sent to WINS server

Well, thats odd! Why is that IP (along with another one) sending WINS requests to this interface?
Turns out some of the other XENservers are hardcoded with THIS FreeNAS IP as the DNS server- bad news.

Time to clean up the DNS entries in the XenServers and then clear this log with a,

rm -Rf ./log.nmbd

Good Times.