Well, I can help a little with the batch command: find "12:10 14:" < sys1210.txt | find /c "for delivery"
The only problem with Scott's suggestion was the missing "<" character. On my IMail gateway, the fixed batch command actually doubles the number of messages delivered, because "deliver" appears in two separate lines for each message. Changing the second string to "for delivery" or in my gateway configuration, "rdeliver", shows the actual number. I also put the "/c" parameter before search string out of habit. I can also opine that Scott suggested grinding the log for a given hour, because it isn't so much the total in a day that counts, the backlog is really about how many messages are delivered in and out at the same time. It's not a science, but I can tell you that my PIII @ 1.3 GHz can handle 1000 messages an hour without a backlog. Under the same load, a PII @ 450 MHz had a significant backlog. To know if you have a backlog, check your \imail\spool\overflow directory. I don't know how you can tell retroactively from your logs if there was a backlog. The other likely culprit is, as Scott already mentioned, slow or failed DNS, so that is also a good place to look. Andrew 8) -----Original Message----- From: Kris McElroy [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 10, 2003 2:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I couldn't get the find "12:10 14:" sys1210.txt | find "deliver" /c to work so I ran find "deliver" log1210.txt /c and find "deliver" log1209.txt /c 12-09-03 32,094 12-10-03 19,276 @ 4:15PM Now remember that this is happening once or twice a week. Is this low? high? Do I need to up the Processor size? This is really becoming an issue since it is happening more and more. Any recommendations would be grateful. Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net "I am always doing that which I can not do, in order that I may learn how to do it." -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, December 10, 2003 3:58 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Mail Hanging up >I have a gateway server that declude Junkmail Pro and Declude Virus are >installed on along with Imail 7.15. Every week or two weeks my mail will be >delayed between 2 to 4 or even 6 hours. This machine is a Dual PIII 866 1GB >Ram, 80 GB IDE Hard Drive 3 com 10/100 NIC. My question is what can I do to >troubleshoot this issue? If I do look in the logs what can I look for that >might through a red FLag? My log files are about 300MB per day for Imail. >What are real world amounts of mail that Imail can handle? Normally, this will happen if there is a larger than normal mail volume during this time -- to the point that IMail (and Declude) can't handle it all. If you know your normal mail volume, you can do something such as: find "12:10 14:" sys1210.txt | find "deliver" /c to find out how many E-mails were delivered during that an hour's time. That should help track if a high volume of mail was being processed. Another possible problem is that mail is taking longer than normal to deliver for some reason. This would normally be caused by slow DNS. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
