I have a weird problem that I am hoping someone on this forum may recognize and help me diagnose.

My users have been complaining that our Netware 6.5 server is slow early in the morning around 5:30 am to 7:00 am.

At first I thought this may be due to another server backing up this server remotely via the remote Backup Exec agent during this time period. So, I rescheduled backup jobs to change the time this particular server is backed up.

Still users are complaining.

Today, I noticed in the sys:\system\HEALTH.LOG file that there are warning of the server having less than 10% of disk space free. The server has 800 GB total space and the current free space is 131 GB. I thought this was odd since 10% of 800 GB is 80 GB, and we have more than that free.

The logs indicate this:

Tuesday, 7-21-2009 5:35 am
Available Disk Space on server ICT_FACIL_FS was in a SUSPECT State
Current Value - 93,776MB
Peak Value - 5,177MB *
Max Value - 826,603MB
Current SUSPECT threshold = Less than 10 % and Critical threshold = Less than 5 %
Current SUSPECT trigger delay = 60 and Critical trigger delay = 120
<HR NOSHADE ALIGN=RIGHT>
Tuesday, 7-21-2009 6:58 am
Available Disk Space on server ICT_FACIL_FS has returned to the GOOD State
Current Value - 101,473MB
Peak Value - 5,177MB *
Max Value - 826,612MB
Current SUSPECT threshold = Less than 10 % and Critical threshold = Less than 5 %
Current SUSPECT trigger delay = 60 and Critical trigger delay = 120
<HR NOSHADE ALIGN=RIGHT>
Wednesday, 7-22-2009 5:32 am
Available Disk Space on server ICT_FACIL_FS was in a SUSPECT State
Current Value - 93,736MB
Peak Value - 5,177MB *
Max Value - 826,606MB
Current SUSPECT threshold = Less than 10 % and Critical threshold = Less than 5 %
Current SUSPECT trigger delay = 60 and Critical trigger delay = 120
<HR NOSHADE ALIGN=RIGHT>
Wednesday, 7-22-2009 6:54 am
Available Disk Space on server ICT_FACIL_FS has returned to the GOOD State
Current Value - 139,098MB
Peak Value - 5,177MB *
Max Value - 826,594MB
Current SUSPECT threshold = Less than 10 % and Critical threshold = Less than 5 %
Current SUSPECT trigger delay = 60 and Critical trigger delay = 120


What I find strange is that the server space dips down to 93 GB free at around 5:30 am each day and then goes back to a GOOD state with around 130 GB free at 6:50 am.

At first I thought this may be a user dumping files on and off the server, but I went back through the log and found this is happening everyday, including weekends. It may be a user, but I don't know why they would be in her on a Sunday at 5:30 am moving files.

Does anyone know what might be causing this ?

Could some sort of automated process be using 40 - 50 GB of free space temporarily to perform some sort of process ?