On Monday 19 March 2018 07:10:57 Felix Miata wrote: > William Morder composed on 2018-03-19 06:25 (UTC-0700): > > So I get this in my terminal: > > 4.0K /afs > > 11M /bin > > 160M /boot > > 57M /etc > > 26G /home > > 576M /lib > > 4.0K /live-build > > 16K /lost+found > > What's in /var/log/? > > # du -sch /* > 4.8M /bin > 174M /boot > 0 /dev > 27M /etc > 22G /home > 1.4G /lib > 19M /lib64 > 16K /lost+found > 4.0K /media > 4.0K /mnt > 375M /opt > 0 /proc > 111M /root > 2.5M /run > 5.0M /sbin > 4.0K /selinux > 1.9G /srv > 0 /sys > 2.4G /tmp > 5.4G /usr > 1.6G /var > # df / > Filesystem 1K-blocks Used Available Use% Mounted on > /dev/md2 18011336 7680600 9392760 45% / Improvising on the command recommended by Nik Klepp: du -sch /var/log/* 100K /var/log/alternatives.log 68K /var/log/apache2 4.0K /var/log/apparmor 1.4M /var/log/apt 60K /var/log/auth.log 316K /var/log/auth.log.1 28K /var/log/auth.log.2.gz 16K /var/log/auth.log.3.gz 4.0K /var/log/bittorrent 0 /var/log/bootstrap.log 0 /var/log/btmp 8.0K /var/log/camo 4.0K /var/log/c-icap 588K /var/log/clamav 124K /var/log/clamav-unofficial-sigs.log 40K /var/log/clamav-unofficial-sigs.log.1.gz 40K /var/log/clamav-unofficial-sigs.log.2.gz 96K /var/log/ConsoleKit 48K /var/log/cubemap 40K /var/log/cups 1.7M /var/log/daemon.log 6.7M /var/log/daemon.log.1 528K /var/log/daemon.log.2.gz 92K /var/log/daemon.log.3.gz 32K /var/log/debug 272K /var/log/debug.1 24K /var/log/debug.2.gz 4.0K /var/log/debug.3.gz 8.0K /var/log/dirmngr 0 /var/log/dmesg 3.0M /var/log/dpkg.log 60K /var/log/exim4 4.0K /var/log/fai 8.0K /var/log/faillog 60K /var/log/firewalld 12K /var/log/fontconfig.log 4.0K /var/log/fsck 0 /var/log/fts.log 4.0K /var/log/fts.log.1 4.0K /var/log/glusterfs 52K /var/log/gnunetd 4.0K /var/log/gnustep-back-common.log 8.0K /var/log/hp 15M /var/log/installer 0 /var/log/kdm.log 4.0K /var/log/kdm.log.1 19M /var/log/kern.log 40M /var/log/kern.log.1 3.5M /var/log/kern.log.2.gz 36K /var/log/kern.log.3.gz 20K /var/log/lastlog 8.0K /var/log/macchanger.log 4.0K /var/log/macchanger.log.1.gz 4.0K /var/log/macchanger.log.2.gz 4.0K /var/log/mail.err 4.0K /var/log/mail.err.1 4.0K /var/log/mail.err.2.gz 4.0K /var/log/mail.err.3.gz 4.0K /var/log/mail.info 4.0K /var/log/mail.info.1 4.0K /var/log/mail.info.2.gz 4.0K /var/log/mail.info.3.gz 4.0K /var/log/mail.log 4.0K /var/log/mail.log.1 4.0K /var/log/mail.log.2.gz 4.0K /var/log/mail.log.3.gz 4.0K /var/log/mail.warn 4.0K /var/log/mail.warn.1 4.0K /var/log/mail.warn.2.gz 4.0K /var/log/mail.warn.3.gz 19M /var/log/messages 40M /var/log/messages.1 3.5M /var/log/messages.2.gz 36K /var/log/messages.3.gz 4.0K /var/log/mixmaster 4.0K /var/log/ntpstats 8.0K /var/log/partimage 12K /var/log/privoxy 4.0K /var/log/samba 4.0K /var/log/speech-dispatcher 1.3M /var/log/syslog 19M /var/log/syslog.1 1.1M /var/log/syslog.2.gz 700K /var/log/syslog.3.gz 436K /var/log/syslog.4.gz 344K /var/log/syslog.5.gz 908K /var/log/syslog.6.gz 688K /var/log/syslog.7.gz 732K /var/log/tdm.log 8.0K /var/log/tor 12K /var/log/ufw.log 184K /var/log/ufw.log.1 24K /var/log/ufw.log.2.gz 12K /var/log/user.log 200K /var/log/user.log.1 16K /var/log/user.log.2.gz 8.0K /var/log/user.log.3.gz 444K /var/log/wicd 112K /var/log/wtmp 20K /var/log/Xorg.0.log 20K /var/log/Xorg.0.log.old 116K /var/log/xymon 180M total I don't know if anything looks suspicious in that. I appreciate the help, if anybody sees something, or can recommend where else to look. Bill