We found it. There were some wrong paths in the global.cfg for some
filters. It keet writing errors out to the decxxx.log file continuously
hence the large log files.

Thanks to David B. we came to a quick resolution.



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, June 01, 2006 8:47 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] vary large large files

Roger, 

Are you getting a lot of mail inbound (Dictionary attack, etc)?  What is

being shown in the logs?  Can you post a snippet?  Is anything else out
of 
the norm(CPU, etc)?  To generate 750MB logs on log level low something
has 
to be going on.. 

Darrell
 -------------------------------------------
fpReview - The easy way to review false positives for Declude...
http://www.invariantsystems.com 

Schmeits, Roger writes: 

> We are getting very large decxxxx.log logfiles on the spooler dir. In
> the neighborhood of 750 meg. Anybody seen this? 
> 
>   
> 
> The debug mode is not on and log level is set to low. 
> 
>   
> 
> LOGFILE           e:\imail\spool\dec####.log 
> 
> LOGLEVEL       LOW 
> 
>   
> 
> #PID / PID DEBUG 
> 
>   
> 
> #EVENTLOG     ON 
> 
> #LOG_OK         NONE 
> 
>   
> 
> ##########################
> Roger Schmeits
> Sr. Network Engineer 
> 
> 101 South 42nd St. 
> 
> Omaha, NE 68131
> http://www.clarksoncollege.edu
> (402) 552-2542 Office
> (800) 647-5500 Toll Free
> ########################## 
> 
>   
> 
> Disclaimer: 
> 
>   
> 
> The information contained in this e-mail is privileged and
confidential
> and is intended only for the use of the addressee(s) indicated above.
> Use or disclosure of information e-mailed in error is respectfully
> prohibited. If you have received this e-mail in error, please contact
> the sender and immediately delete the original message. 
> 
>   
> 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to