update filesystem problems - still unsolved but new evidence

[Wolfpaw - Dale Corse]

[SNIP]

> sweep is the av scanner for qmail (user id 85). Strangely, 
> the av scanner
> does not
> sit on /, rather /usr/
> 
> An "du -s /" doesn't seem to work either; but a "du /" works.
> 
> So it shows, that something over night or a regular process 
> is filling /,
> because
> I cleared 3 MB yesterday as mentioned above and now again 
> it is full.
> 
> I am running the du / pipeing it into a file (on another 
> partition of
> course) and
> will sort it quickly. Maybe this gives a clue too.
> 
> Any help in solving that very appreciated.
> 

Have you tried removing logs, and rebooting the daemons they
belong to? For example, apache logs can get HUGE, and I seem
to recall a simular bug on a box we had, in which you would 
blow away the log file, and if it was big enough, it would
not free the space correctly for some reason until apache was
restarted, if I recall syslog had some simular issues. Either
killall -KILL <process name> (then restart it), 
or clean up and reboot your box..

Might work.. might not.. just a thought.. I didn't read the
whole thread, so its a stab in the dark :)

Good luck :)
Dale.
--------------------------------
Dale Corse
System Administrator
Wolfpaw Services Inc.
http://www.wolfpaw.net
(780) 474-4095