First thing to look at would be /var/log. This contains various logs as implied by its name. If you don't have logrotate running the logs (e.g. messages) could get extremely large. Files there can pretty much be zeroed out (e.g. > /var/log/messages) but some of them are activley in use (such as messages) so you should do:
Code:
service syslog stop
before zeroing them out then
Code:
service syslog start
afterwards.
Also try doing:
Code:
find /var -name core
This will find core dumps (dumps of memory left behind by programs that died unexpectedly). These can be removed.
Also /var/spool subdirectories may contain things that can be removed as well as /var/mail.
Finnally doing:
Code:
find /var -name *.tar
Will show you any tar archives you have. Typically you can compress these by doing:
to free up space.