Scenarios like this frequently mean a file was deleted while it was still open. Most commonly a debug log file in /tmp or log files in /var/log. When you delete a file in Linux (and most sane Unix-like systems) it doesn't free up the disk space until no one is using the file any more.
You can check for this with "lsof | grep deleted". If you see a line similar to
Code:
tin 21208 sweh 6u REG 253,0 1768 851996 /tmp/tmpfMXfjFg (deleted)
then you need to check the "size". In this case the size is 1768 bytes, so this is a small file and not a problem (it just happens to be how "tin" works). If you find a program with a large deleted file then you need to stop that program. That should free up the file and let the OS reclaim the disk space.