Big amount of written data to ssd (several gigabytes)


Recommended Posts

Before you tell me this is not a Windows 8 issue but the software I use and how I use it, I need to clarify.

When I was using Windows 7, I monitored the written bytes to my SSD drive because I was worried about write cycles. I learned to forget about it and just use the disk and don't bother with stuff like moving the Firefox profile and cache to an HDD, which kind of kills the whole purpose of having an SSD. Anyway, after using the computer for a whole day, both me and my brother, the amount of written bytes to C: wasn't too big - around 1GB, sometimes more, sometimes less. This is without modifications to software - no Mozilla profiles, pagefiles, etc, were moved to HDD.

Now on Windows 8 it's a little weird. After a day of computer use (8 hours or more), I have between 6 and 11GB written to C:! I don't use too much applications - it's pretty much Firefox, an instant messenger, foobar, Gimp... there's just no way anything should write THAT much to the disk.

I tried running procmon, filtering the results by written files or filtering by C:\, but during monitoring there was almost nothing written to the disk. After using Firefox for a while, I check the written bytes and... additional 6GB suddenly have been written. So I moved the profile and cache folders to HDD, to see if it changes anything, but it did not, so I went back to using the SSD for them. My research was fruitless. I could not identify what is writing so much data. Firefox and the People app wrote the most, likely because of storing web cache on the disk, but the amount of these writes is very small and should never reach over 10GB within a few hours.

I use DiskCountersView to monitor the amount of read and written data. For a second, I thought this program might not be compatible with Windows 8 and show weird stuff because of that, but a friend of mine does not have this issue. He has about 1GB written, after a few hours of browsing the web, watching movies, etc.

I have scanned the whole system with the built in Defender, Malwarebytes Antimalware, SpyBot and they didn't even find something suspicious. The system is 100% clean. The situation did not change after reinstalling the whole system from scratch (due to other reasons). I don't use hibernation, only fast boot. System Restore very rarely creates new restore points and I doubt they would be big enough to generate over 10GB's of data.

So I ask here :) Is this normal for Windows 8 to write so much to the C: partition? If so, why? :p If it is not normal, then do you have any recommendations about how should I investigate further? I know this amount of writes won't suddenly kill my SSD (or at least shouldn't ;)) so I could probably forget about it, but putting SSD life expectancy aside... what could possibly be in those tens of gigabytes? :p

Thanks in advance for any tips.

What's your drives sector size? Each sector is usually about 4KB, spread unevenly across a drive, on the drive you also have 'blocks' of a set size, when you read or write to these blocks, you get or write to the WHOLE block so writing where 2 files are storage would require reading the contents, modify one of the files and then write back the new block. Maybe that's why firefox is using a lot?

If you've got an SSD, why have you not set firefox's cache to memory only?

My disk is Kingston V200, 128GB. It has 4kB sector size, the NTFS partition has 4kB cluster size. Firefox is not the cause of the problem. Setting its cache to memory only is interesting and I'll read about that, but it won't eliminate my problem with ~10GB writes on a daily basis... because, as I said, I tested with the cache and profile folders move from the SSD to HDD. The SSD still had many gigabytes written to it on random occasions, usually when idle - say, I see 1GB written in DiskCountersView, I go out of the room for a few minutes, come back to my PC and see 6GB written :p

No, I haven't. That's the most weird thing - at least some of the huge writes occur when the computer is idle.

I also used Task Manager, Details tab, and added the column "I/O write bytes". No running processes ever have more writes than a few hundred megabytes, and after suming them up... it's still a few hundred megabytes, not dozens of gigabytes...

I've noticed that the space used on C:\ varies a lot on Windows 8, I think it's to do with the way the system is shut down as after a reboot it will go back to 74GB available but if it's been running for a few days it goes down to about 70GB. I'm running a 120GB OCZ Agility 3 SSD but I'm not particularly fussed about this. I take the attitude that I bought the device to use it, not to keep thinking about how many write cycles it's doing. It will probably take years before it causes any issues with the drive at which point I would have upgraded anyway.

This seems to be consistent with the Windows 8 install on my netbook which also seems to free up a few gigs of space after being rebooted after being running for a few days.

I don't care about the disk space used. It's pretty much stuck at 89-91GB free.

I disabled the hiberfile, disabled fast boot, disabled the pagefile. After booting and launching a few applications: ~100MB write bytes. That's how it should be. So i start up ARMA2 for 5 minutes. Exit. Writebytes: over 1GB.

The game is *not* saving anything but a few config files in Documents and %appdata% nearly a 1MB total.

So:

- Firefox is not writing gigabytes to disk

- games are not writing gigabytes to disk

- but diskcountersview says gigabytes have been written

I wouldn't care about this, as the SSD drive has been bought to be used and be happy about the speed gains. But, Windows 7 wrote about 1GB of data after a few hours of use. The same kind of use on Windows 8 generates tens of gigabytes of write files. A friend of mine with Windows 8 has a few hundred megabyte write files after a few hours of system and app use.

So, I don't really have a problem with SSD wear. I don't care, I'll buy a new one when this one dies. The thing that troubles me is what the hell is being written to the disk so much, to generate ~10GB of write files. Interesting thing is, my free hard disk space doesn't go below 89-91GB, ever. So it's also not my complaint, that I'm suddenly 10GB of disk space less. I am not. The total amount of disk write operations sums up to ~10GB per day, which is ~10 times more than on Windows 7. Is this how Windows 8 works?

I thought about it too, that DiskCountersView is somehow not compatible with Windows 8, similarly to how LatencyMon and other DPC monitoring software are, and is simply reporting wrong.

But a friend of mine is also using Windows 8. His computer usage is similar to mine, too - 99% of the time is spent in Firefox. Default configurations on both computers. He tells me DiskCountersView is reporting several hundred gigabytes of write file operations.

As I said, I'm not paranoid about SSD wear. It just bothers me what the hell is going on :p

edit - could you run this program http://www.nirsoft.n...nters_view.html and tell me how much bytes you have in the Write bytes column, on the C: drive? Also, how long is your system running since the last restart. One more thing - due to how fast boot operates, shutting down the system and starting again, does not reset the counters. So the amount of write bytes can be huge if you have not restarted the system recently.

  • 2 months later...

I have bad experience with Firefox - even with prefetch off and disk cache off, it writes over 2 GB of data per day with not heavy browsing. It seems it is because of permanent rewrite of approx 10 MB places.sqlite file. Every new web page or link open adds about 11 MB in Process Explorer I/O write bytes, the datetime of the file is changed but the total size is almost constant.

Anyway, rewriting of file consumes the same amount of work from SSD and it eats from its life...

If this is true assumption, thanks a lot mozilla & sqlite. It does not mean Chrome is much better :-) Try to watch process explorer for a while when browsing.

I can understand if you want to figure this out to know what is going on, but I would not worry about the SSD and its' life. The life of that SSD will outlast that computer and you are going to buy a new SSD for a new computer build before that drive ever looses space or performance. Get some sleep :)

This topic is now closed to further replies.
  • Posts

    • You've tried DuckDuckGo and Brave Search, now get serious with SearXNG by Paul Hill Over the last decade, it has become quite trendy to dump Google Search in favor of privacy-preserving alternatives such as DuckDuckGo, Startpage, and Brave Search. These search engines have done a very good job at highlighting dodgy practices by Google, such as adjusting search results based on what it thinks you’ll like (filter bubble) and stalking you around the web to advertise to you. While these search engines are good starting points when compared to non-private services like Google, there are still quite a few issues with them. For example, both DuckDuckGo and Brave Search require running non-free JavaScript in your web browser, which is comparable to running proprietary software on your computer, meaning you can be sure about what it’s actually doing in the background. Another issue is that these search engines are hosted on the respective companies’ servers, and you are using a service that you don’t control. Finally, DuckDuckGo, while offering privacy features, relies heavily on Microsoft’s infrastructure for its results and, in the past, has permitted Microsoft tracking scripts. If you are looking for a more private search solution than DuckDuckGo, Brave Search, and Startpage, then I recommend taking a look at SearXNG. It is a privacy-respecting metasearch engine that can be used via different public instances, which is useful for mobile users, or you can install it on your computer or server and run it locally with maximum control. Unlike Google, Bing, or Brave Search, which crawl the web and have their own search indexes, SearXNG is a metasearch engine, meaning it taps other search engines, stripping your identifying data, such as IP address, user agent, and cookies, in the process. Your search query is sent to the other search engines you enable before aggregating the results. SearXNG has deployment flexibility. If you are a casual user or a mobile user and don’t want to run SearXNG locally, you can use a public instance that is hosted by someone else. The main problem with this is that you are putting trust in the maintainer of the instance regarding stuff like logs that they may keep; good hosts should have a privacy policy explaining their policies. If you are trying to use SearXNG, you can also install the software on your device and then head to 127.0.0.1:8080 in your browser and search from there. While you don’t have to worry about a third-party admin like the public instances, search engines could ultimately block your IP address if they frown on you pulling in their search results locally. If you want to run it locally, it’s a good idea to use proxies or VPNs to hide your actual IP. You don’t have to worry about this with a public instance, as search engines never see your IP address. The main privacy benefit of using SearXNG is that it isolates your identity from the underlying engines that it’s capable of searching, such as Google and Bing. These search engines will only see requests coming from a generic server, so they can’t profile you and create a bubble filter that influences what results you see. This also ensures that your search engine doesn’t turn into an echo chamber that prevents you from reading alternative points of view. As a free software project, you are allowed to inspect SearXNG to make sure there are no negative features bundled inside. This sets it apart from the privacy search engines mentioned earlier because you can’t check their source code. As a meta search engine, you are not restricted to getting results from one source. Due to the fact that it scrapes content from other websites, your SearXNG instance will periodically get blocked from different providers, so it’s good to select a range of sources as a backup. While enabling all of the services will give you great results, this can make searching slower. I am personally happy with slower searches for the best results, but you can always check which providers are slowing down your search from the search results page and disable them to speed things up. If you want decent results quickly, enable the main search providers such as Google, Brave, DuckDuckGo, Qwant, Bing, and Yahoo. This way, you get wide coverage without the latency. On the Engines tab in Preferences, do note that there are different tabs, such as General, Images, and Videos, with their own providers that can be toggled and are not covered by "Enable all" while on the General tab, so be sure to dig into each. Just a note, if you want to enable everything, press "Enable all" in one tab, then hit save at the bottom of the page, then do the next tab, and so on. If you press "Enable all", then do that in each tab, and then save, nothing will stick. When I had just some of the search engines enabled, I searched “define nefarious” and results came back with the definition of “define” - obviously that was a sucky result. However, when I had everything enabled, it found dictionary pages for the word “nefarious” and even had an inline definition on the sidebar, which is quite nice too - that was delivered by WolframAlpha for anyone wondering! Probably the worst thing about this meta search engine is that the engines you select are saved with a cookie, so you must enable them on every new device you use SearXNG on, including if you decide to go into incognito mode with your web browser. Honestly, I would say this is the most annoying aspect, and perhaps if your browser lets you choose a separate private browsing search engine, then it would be best to use DuckDuckGo for this portion of your browsing. Another weakness of SearXNG is the random blocking of it by search providers. When you are on the results page, expand the “Response time” box, and it will show things like “Suspended: too many requests” or “access denied”. This is why it is good to enable several providers so that there is always a fallback to get results from. I won’t pretend SearXNG will be for everyone, however, if you enable all of the providers and put up with the slower response time, the results can be really amazing. Even if you don’t want to use it as your daily driver, keeping a bookmark handy that links to it is a good idea if you ever feel like doing a deep dive into a niche topic where other search engines are just failing to bring up any good result, due to the amount of sources it looks on. If you’re interested in radical user control over the software you use, installing SearXNG locally can also be a good idea, but be prepared to be temporarily blocked from sites if you trigger bot sensors without a VPN. Personally, I’ve opted to use a public instance, rather than install it myself. If you want to use it via a public instance, head over to searx.space to find a provider. Let us know in the comments if you have used SearXNG or its predecessor, Searx. What do you think about the quality of the results?
    • Dear Neowin, If it is not too much trouble, can you start using the new-ish designations for Insider Preview? "Experimental" is different than "former Dev" as it can apply to different models, eg 26H1 or 26H2 etc, right? No need to seed confusion IMHO. And, please "finally" update your graphics. OK?
    • Did you see their FAQ, its quite good. Have a look in the Advanced section. https://delta.chat/en/help
    • Just install Linux Mint that is a real blessing and many times cheaper because you can continue using your old Windows computer/laptop with the latest Linux updates.
    • Interesting share -- however it does not make sense: Email messages get stored somewhere, so how is Delta Chat "based on email" and decentralized without actually storing anything? By Web3 standard practices, the various Relays would require dedicated storage to make messages available to the recipients (like a large series of message queue channels, akin to racks of traditional post office boxes)... and Contacts must be two-way confirmed in order for encryption keys to be exchanged (ostensibly every key-pair is uniquely bound between sender and recipient) and the Relays would preserve the public keys in order to facilitate message carriage... or every device stores all sorts of keys and contact info. All of this to say, decentralized messaging is like running Bluesky nodes except instead of discovering/browsing public feeds by various posters (at the given node) these Delta Chats would be relaying encrypted messages (via Relays) that only trusted recipients would have the appropriate decryption key (their own private key) to read it. But this doesn't solve the "it's like email" sales pitch. The only way it's like email is that there's encrypted binary stuff being transported from your app into the federated ether of Delta Chat Relays for others to decrypt (hopefully only the intended recipient)... but outside of this federated relays framework, it is absolutely nothing like email.
  • Recent Achievements

    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
    • Week One Done
      tuben earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      503
    2. 2
      +Edouard
      226
    3. 3
      PsYcHoKiLLa
      158
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!