Hi Chris,
If it happends again, suggest you install tcpdump on the server and run something like tcpdump -i eth0 -s 0 -w dump.log port 25
Then load the log file in Ethereal (www.ethereal.org) and choose "Follow TCP stream" on the streams to try and determine exactly what the traffic is. You may need to try a different port, and you may be able to capture using Ethereal directly if the server supports it.
It sounds like the RemoteDelivery mailet may be responsible, but you should see logging in the mailet log if that's the case.
hth, Craig
Chris Hane wrote:
I have been running james for a couple of months now without incident. We send/receive around 50MB / day of email through james. All of a sudden we spiked to around 1.2 GB / hour (that is correct 1.2 GB / hour) and it was steady traffic over days.
We measured this using ntop and the ISP confirmed with measurements at their switch. I finally tracked it down to James. When I stopped James, the traffic stopped. When I started James, the traffic started again.
I set all of the logging to DEBUG. When I started the James server and the traffic picked back up (instantly), none of the logs were growing. The entries being added were in the 1-2 message / minute and not enough to account for 1.2GB/hour.
After a some experimenting, I found there were about 20-30 messages in the /var/mail/outgoing directory. The oldest one had a date of 3 days ago and most were from today. Also, the largest outgoing email was less than 100Kb.
When I deleted these messages and restarted James, the traffic did not pick back up and remained at normal levels (at least for the last two hours).
I know I'm probably not providing enough information to troubleshoot this effectively. I have a couple of questions though to try and help me track this down if it occurs again:
0. Actually, does anyone have any suggestions?
1. Is there logging I can turn on for the outgoing retries?
2. Rather than delete the outgoing emails again, is there some other action I should take to try and isolate this?
3. I installed James because we are a java shop. If someone can point me to a section of code that deals with the outgoing email directory I can try to look through the code the next time it happens and even install a debug version of james to try to catch the error.
Thanks for your help/suggestions in advance. Chris....
P.S. Here is my configuration info: James 2.2.0 Using the file system store Usage Mysql 4.1 for JDBCVirtualUsers JDK 1.5.0-b64 Linux 2.4.28 Dual PIII
------------------------------------------------------------------------
No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.1 - Release Date: 1/27/2005
------------------------------------------------------------------------
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
