Hello @Andrew thanks for the tip. We tried what you suggested by running du without the -s when the issue re-occurred, however we did not see any difference when comparing the results with "diff" to the following files:
- "disk_usage_before_restart.txt": du -h results when the disk usage is almost full - "disk_usage_after_restart.txt": du -h results after restarting "clamonacc" and disk space has been freed ~$ diff <(grep -v "/proc" disk_usage_before_restart.txt) <(grep -v "/proc" disk_usage_after_restart.txt) 85316a85317 > 36K /var/tmp 126817d126817 < 380K /var/tmp/folder/pdf-tmp 131004d131003 < 760K /var/tmp/folder 131193d131191 < 796K /var/tmp 134093d134090 < 1.8M /var/spool/rsyslog 134272d134268 < 1.9M /var/spool 134425a134422 > 2.1M /var/spool/rsyslog 134503a134501 > 2.2M /var/spool 136369a136368 > 42M /home/user 136371,136372c136370 < 43M /home/user < 44M /home --- > 43M /home ------- Original Message ------- On Friday, April 14th, 2023 at 2:33 PM, Andrew C Aitchison <and...@aitchison.me.uk> wrote: > 'du -h / | sort -h' - without the 's' - will show where the space is used. > > -- > Andrew C. Aitchison Kendal, UK > and...@aitchison.me.uk _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat