Hi,
I have a production box. There is a data directory on its own filesystem. Let's call it /data. The root filesystem is filling up and I can't see where the files are. I've been using du -hs `ls -A` to navigate the largest used points, but the numbers don't add up. There are several gigabytes used which are not accounted for. As well there is a period of time for which data are missing.
I suspect that somehow during a maintenance cycle the /data filesystem was unmounted, data written and the /data filesystem mounted again.
I can't justify taking the services down to unmount that filesystem, is there a way to peek without unmounting?
Thanks.


