What it's not. Do you know what time, exactly, the server crashed? Open up the log console (Applications/Utilities, I think) and see if the system log says anything.
It's not the message_size_limit error - that's a known issue. Likewise, the other postfix warnings won't cause a crash.
Clamd looks like it was shut down, not crashed - so I don't think it caused the crash.
To shut down the AV updates, kill freshclam, and comment it out of zmantivirusctl.
THe multiple processes are normal - some of the daemons start several children to process requests.
You mentioned disk - is zimbra on a local disk, or a network volume, a SAN, ??? |