To see how much is used where order as super user du /var -hx --max-depth=1 Do you have mount points in /var ? Regards, jvp.