On Thu, Jun 23, 2005 at 04:39:02PM +0100, Chuck Amadi Systems Administrator 
wrote:
> Hi PB
> 
> I reverted back to ./var, ./tmp as you So suggested and added ./media to
> the exclude list.
> 
> I run amdump and It looks like it's working accordingly as per the Dump
> Summary.

Starting to look good.

One thing though, as Paul noted, while there are lots of
temporary files and other fluff under /var, there are also
lots of important things like system and security log files.

You may wish to remove ./var from your exclude list and
add in other subdirectories.  Things that come to mind
and can be seen in your report are:

        ./var/tmp
        ./var/spool/postfix
        ./var/spool/cups        # maybe ./var/spool instead

And then monitor your reports for a while to determine others.

-- 
Jon H. LaBadie                  jon AT jgcomp DOT com
 JG Computing
 4455 Province Line Road        (609) 252-0159
 Princeton, NJ  08540-4322      (609) 683-7220 (fax)