I did indeed have mail and it was indeed a logwatch...
thanks for your help - it's been a lifesaver.