Looks like /var/storage is filling up...
firewall-1:/var/storage # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda6 5.3G 1.8G 3.4G 34% /
tmpfs 1001M 72K 1001M 1% /dev
tmpfs 1001M 0 1001M 0% /dev/shm
/dev/sda1 342M 19M 306M 6% /boot
/dev/sda5 27G 18G 6.8G 73% /var/storage
/dev/sda7 35G 322M 33G 1% /var/log
/dev/sda8 1.8G 35M 1.7G 3% /tmp
tmpfs 1001M 20K 1001M 1% /var/storage/chroot-smtp/tmp/ram
firewall-1:/var/storage # du -hs *
16K agent
3.9M chroot-ftp
18G chroot-http
17M chroot-pop3
30M chroot-reverseproxy
34M chroot-smtp
391M cores
16K lost+found
66M pgsql
firewall-1:/var/storage/chroot-http # du -hs *
4.0K dev
332K etc
2.8M lib
0 proc
18G tmp
69M usr
166M var
firewall-1:/var/storage/chroot-http/tmp # ls -hl
total 18G
drwx------ 2 httpproxy httpproxy 4.0K 2011-07-28 13:15 certs
-rw------- 1 httpproxy httpproxy 5.3G 2011-07-30 00:54 tmp_21Al2w
-rw------- 1 httpproxy httpproxy 82 2011-07-28 22:22 tmp_dNKrsr
-rw------- 1 httpproxy httpproxy 83 2011-07-28 22:44 tmp_F2KPnu
-rw------- 1 httpproxy httpproxy 425 2011-07-29 22:11 tmp_jRd3Jw
-rw------- 1 httpproxy httpproxy 17M 2011-07-29 22:12 tmp_K9Jozt
-rw------- 1 httpproxy httpproxy 394 2011-07-29 18:40 tmp_m6PHnf
-rw------- 1 httpproxy httpproxy 394 2011-07-29 18:51 tmp_QYALQB
-rw------- 1 httpproxy httpproxy 17M 2011-07-29 18:41 tmp_Wk6neO
-rw------- 1 httpproxy httpproxy 17M 2011-07-29 18:51 tmp_Wrnths
-rw------- 1 httpproxy httpproxy 12G 2011-07-30 00:54 tmp_WSdTX4
Those are some BIG temp files in there! I'm assuming these file sizes are not normal.