Hello Chris, Friday, January 5, 2007, 2:34:48 AM, you wrote:
> Pete, > Every so often I end up with thousands of .snf, .xxx and .que files in > my sniffer directory, and it stops filtering spam. Any ideas?? You should never find thousands of .snf files... The other files are job files -- each representing it's own message. This condition can occur if the system is restarted uncleanly or if it becomes badly overloaded. In particular, on Declude systems, if the system gets too many messages it may take too long for some messages to get scanned -- in those cases Declude will kill off the process before it can finish or clean up-- once a numger of job files is abandoned in the SNF working directory, all of the SNF instances will relax their timing to compensate for the apparently high load -- as a result more of them get killed off and a vicious cycle is created -- eventually there are so many scan jobs that none of them can be processed in a reasonable time. In a true overload condition there is almost no way to prevent this-- at least w/ Imail/Declude systems, because there is no inbound throttling - the server will keep accepting and queueing messages even as it is choking on them. However - you can make the system more resilient by significantly extending the timeout for external filters so that SNF instances don't get killed off. > I have to delete them, and restart my smtp server & sniffer engine Done cleanly this is the fix for this condition. Cleanly = stop smtp first, stop your persistent instance, Then (once no more messages are being processed) clean out any abandoned job files (.xxx, .que, .fin, .wrk, .err, .abt) then restart your persistent instance, then restart smtp. Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
