Hi Andreas, > Well, if this is a publicly available system, there is always the chance > that your server has been compromised and is hosting warez or other > junk. But even then, the bytes would have to be somewhere in use, right? > If this isn't a critically busy system, you could go into single user > mode and run "e2fsck -f <dev>" to see if there is something wrong with > the filesystem. However, I suspect that as soon as you shut down to > single user mode and your processes are killed that your space will > become available again even before e2fsck is run. Fortunately it is ony a Standby- and Backup-Server. Thus, I stopped all daemons, unmounted /var, called e2fsck, mounted again, started daemons and: usage is 48% - about what I expected. Strange. Thanks a lot! Michael -- Hostsharing eG / Boytinstr. 10 / D-22143 Hamburg phone+fax:+49/700/HOSTSHAR(ing) (= +49/700/46787427) http://www.hostsharing.net: host, where YOU make the difference