mystery /var space usage

[joseph kacmarcik]

> /dev/amrd0s1e   9.8G   4.8G   4.2G    53%    /var
> 
> A du -h of /var shows a total of 616M data only. First thing that came
> to mind is some process which is holding onto data so I tried
> restarting various daemons - cyrus, imapd, exim, apache and still no
> change. I've checked with fstat and lsof to see if I can see anything
> suspicious but nothing out of the ordinary shows up.

sounds like the maillog. have you tried restarting syslogd or whatever process
you have that writes to your maillog?

joe