R. Scott Perry wrote:
My guess is that something unusual was happening during that hour that caused a resource problem, which in turn caused the AV program to crash.
It started around 2 a.m. and nothing out of the ordinary was scheduled, and of course this is low traffic time. On an occasion though, the Web mail service will crash and it's not out of the ordinary for someone to be doing review at this time.
I did find upon further research that I hard booted the machine at 3:05:37 AM on 5/28/2004 and it again started logging events at 3:09:59 AM on 5/28/2004. I seem to recall noticing that the server hung and couldn't access it so I remote power cycled it. Situations like that are pretty rare, maybe 4 times a year and mostly due to Web mail going haywire, though I can often still access the server if caught fairly quickly.
That is very strange. Were there SMTPD entries in the IMail log file during this time? Nothing within Declude should prevent SMTP connections from working.
I gave you the IMail log exactly as it showed before and after with no missing data. If you notice the time stamps, there was no activity in that log. The reboot caused the services to log that they were starting and I missed that before. It looks like serendipity that the server was coming back up exactly 1 hour after the error and that Declude logged that 1 hour message. Am I to assume that Declude keeps track of the time in hours and minutes and that's what caused this message to appear? If you note from the above times, Declude JunkMail logged that error as the server was coming back up from a power cycle.
So is the likely explanation that F-Prot caused the crash/hang at 02:07:37 on 05/28/2004 (there were actually two log entries for Virus that showed this error at that time for different messages), or maybe another process on the server such as Web mail crashed/hung the server and the condition spilled over to cause issued with Declude Virus and hence the log entries? Or probably something else?----- JunkMail Log -----
05/28/2004 03:07:37 Qd72121bf01b645f4 ERROR: External program didn't finish after 1 hour; terminating.
I just wanted to make sure that I wasn't seeing a bug with interim software that might have been known and I didn't initially recall that I power cycled the server at that time due to it's condition. I was also worried that there was a 1 hour clock for time outs, but that seems like it was just a coincidence. Right?
:)
===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
