In the case of a customer accidentally saving installation files or backups to the root directory, you can simply remove those files and it should alleviate the problem.
In the event that that the /data directory is mounted on /dev/sda, you can do the following:
1) Mount the data directory to the right partition:
'mount /dev/sdbX /data'
**CA6000s will mount on sdb1
**CA6300s and newer models will mount on sdb2
2) Create a bind mount so the raw packet files can be preserved and moved to the proper partition
'mount --bind / /root/temp'
3) Move the misplaced data
'mv /root/temp/data/* /data'
4) Verify space has been freed up on the root directory
5) Now that there is space, verify the drill down from ADA is functioning properly.
6) Ensure that your /data directory has a proper entry in your /etc/fstab file. It is common that this entry is missing and when a VMTP is rebooted, the /data directory will not be remounted automatically. Your fstab entry should look like this:
/dev/sdbX /data xfs defaults,noatime,nodiratime,osyncisdsync,logbufs=8,logbsize=64k,nobarrier 1 1
**CA6000 machines will mount on /dev/sdb1
**CA6300 and later models will mount on /dev/sdb2