displaying all directories used space on a partition

[bradcarter]

Ok on a server experianced a DOS attack now its /usr dir is full (all 1.9 Gigs filled). I have been trying to find what the problem

 

Filesystem            Size  Used Avail Use% Mounted on

/dev/hda7             372M  168M  185M  48% /

/dev/hda1              45M   23M   20M  53% /boot

/dev/hda6              31G  1.7G   28G   6% /home

none                  503M     0  503M   0% /dev/shm

/dev/hda3             1.9G  1.9G     0 100% /usr

/dev/hda2             1.9G  188M  1.6G  11% /var

 

Now I have being using:

du -h

to try and find what is filling it up. I have already checked and emptied the logs, no luck

 

Everything is running like sluge until I can get this figured out.

[theYinYeti]

I don't have any idea on your problem. Maybe you'll have more info by starting fam, and running top.

 

Yves.

[bradcarter]

Thanks for the responces so far. I am still trying to use du -h it is recursive so I am assuming I can from /usr I can pick out some large files. My plan is to try and use grep to pull out files that are sized in the MB as most of the files are under that. My main problem is figuring out a reg ex to do that. I am thinking 3 didgits and a M would be enough to narrow it down. I can do minor regex for scripting though I am unsure of the syntax for grep

 

du -h | grep [0-9]{3}M or something like that?

 

Thanks :)

 

The search continues....