Joshua, I don't know if this has been suggested, but to completely rule out the new Declude 1.82 as the culprit could you revert to your previous version of Declude, comment out the spamheaders test, and see if your CPU is still maxed.
Marc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 3:28 PM To: [email protected] Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - John, It took me a while to get these stats. I reviewed the SMTP logs for 12/4, 12/5, 12/7, & 12/8. I know the server was running fine during this week. Usage is as follows. 12/4 - 83,170 messages 12/5 - 82,065 messages 12/7 - 95,087 messages 12/8 - 95,730 messages I reviewed the SMTP logs for the 1/2, 1/3, & 1/4. These are current and usage is as follows. 1/1 - 59,717 messages 1/2 - 63,795 messages 1/3 - 78,945 messages 1/4 - 79,410 messages It appears as if the beginning of last month, when we were running fine, had a lot more messages being delivered. The only things I see in the log disturbing for today are: [EMAIL PROTECTED] 4.63.108.6 = 1130 messages <> = 1068 messages I have an ipfile that I have set to automatically delete anything from the ip 4.63.108.6 because they have been the top sender of the log for three days. However, this messages is still being processed. Matt, Average SMTP log size is between 102MB to 200MB. This appears normal. The drive that the logs were on wasn't severely fragmented however, I de-fragmented it anyway. The drive that the spool directory is on is 86% free but about 60% fragmented. This drive could be de-fragmented however, I'm worried about de-fragmenting while the CPU is at 100%. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, January 05, 2005 12:17 PM To: [email protected] Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix The CPU spike is probably do to sheer volume. What is the current volume of messages being processed? John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Joshua M. Hughes > Sent: Wednesday, January 05, 2005 8:22 AM > To: [email protected] > Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix > > I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has > been maxed out and the server bogged down since my return after the New > Year. I have commented out the spamheaders test and the CPU is still maxed. > I went into IMAIL and changed the delivery application from declude.exe to > smtp32.exe and restarted the SMTP service and the processing dropped from > 100% to approximately 13% - 20%. I placed the declude.exe back in as the > delivery application and the processor utilization shot right back up. This > narrows it down to declude however, I have not yet pin pointed exactly what > is causing the increase in processor usage. Under the assumption this was > caused by one of my few minor changes before the New Year I reversed all > changes made the week before the New Year. Still the processor is maxed out. > Any thoughts, any ideas? I don't want to go through and comment out each > test one at a time to find which the offender is. > > Thank you, > Joshua > Sunline Team > (941) 206-7870 > > http://www.sunline.net/ > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser > Sent: Tuesday, January 04, 2005 10:18 AM > To: [email protected] > Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix > > Hi, Scott, et.al, > I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of > doing this upgrade I've noticed that my mail server has started to bog down. > I don't know if I'm getting his with a new wave of spam and the server's > straining to keep up or if there might be something in the new Declude code > which would cause the .EXE to not run as quickly or as efficiently as > before. > > I'm not pointing fingers. I just wanted to know if there's been any > possible performance changes because of the bug fix. If not I'll look > somewhere else. > > Thanks In Advance, > Dan Geiser > [EMAIL PROTECTED] > > > ------------------------------------------------------------------- > E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
