The thing is that 'normal' large messages do not cause this. I have tested this. I can't recreate the issue with a regular message. I just sent a test message with a Word, PDF, AutoCAD drawing and an Excel file - total 1 MB. Took about 2 to 3 seconds to send.
These forwarded messages can even be small i.e. 200 kB. I will say that SA 2.61 has sure calmed my CPU usage in general: http://mrtg.orourke.ca/firewall/cpu.html I installed it yesterday (Thursday in the afternoon) and my erratic CPU usage has really dropped off. Also my hunch about the attached headers is based on the fact that the CPU spikes are typically during business hours. I have attached a sample of my maillog. Note the long task times. I would also add that the 2.61 upgrade has perhaps helped / solved this issue. The message did not flat line my CPU usage as it did before. I resent the sticky message from yesterday and I did finally go through - 714 seconds though: #Elapsed #Task #Log Entry 0:00:00 0:00:00 Dec 12 07:44:13 firewall spamd[22141]: debug: read_scoreo (*SNIP*) 0:00:00 0:00:00 Dec 12 07:44:13 firewall spamd[22141]: debug: user has changed 0:00:00 0:00:00 Dec 12 07:44:13 firewall spamd[22141]: debug: bayes: 22141 untie-ing 0:00:00 0:00:00 Dec 12 07:44:13 firewall spamd[22141]: debug: mkdir /var/root/.sp(*SNIP*) 0:00:00 0:00:00 Dec 12 07:44:13 firewall spamd[22141]: debug: bayes: no dbs pres(*SNIP*) 0:00:02 0:00:02 Dec 12 07:44:15 firewall spamd[22141]: logmsg: checking message <GBE(*SNIP*) 0:00:02 0:00:00 Dec 12 07:44:15 firewall spamd[22141]: checking message <GBE (*SNIP*) 0:00:02 0:00:00 Dec 12 07:44:15 firewall spamd[22141]: debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200 0:00:02 0:00:00 Dec 12 07:44:15 firewall spamd[22141]: debug: bayes: 22141 untie-ing 0:00:02 0:00:00 Dec 12 07:44:15 firewall spamd[22141]: debug: bayes: 22141 untie-ing db_toks 0:01:46 0:01:44 Dec 12 07:45:59 firewall spamd[22141]: debug: is Net::DNS::Resolver available? yes 0:01:46 0:00:00 Dec 12 07:45:59 firewall spamd[22141]: debug: all '*From' addrs: [EMAIL PROTECTED] 0:01:47 0:00:01 Dec 12 07:46:00 firewall spamd[22141]: debug: running header regexp tests; score so far=0 0:03:23 0:01:36 Dec 12 07:47:36 firewall spamd[22141]: debug: running body-text per-line regexp tests; score so far=1.017 0:05:05 0:01:42 Dec 12 07:49:18 firewall spamd[22141]: debug: Razor2 is not available 0:08:26 0:03:21 Dec 12 07:52:39 firewall spamd[22141]: debug: running raw-body-text per-line regexp tests; score so far=2.091 0:08:26 0:00:00 Dec 12 07:52:39 firewall spamd[22141]: debug: running uri tests; score so far=2.091 0:10:09 0:01:43 Dec 12 07:54:22 firewall spamd[22141]: debug: uri tests: Done uriRE 0:10:10 0:00:01 Dec 12 07:54:23 firewall spamd[22141]: debug: running full-text regexp tests; score so far=2.091 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: Razor2 is not available 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: DCCifd is not available: no r/w dccifd socket found. 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: DCC is not available: no executable dccproc found. 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: Pyzor is not available: pyzor not found 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: all '*To' addrs: [EMAIL PROTECTED] 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: DNS MX records found: 2 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: RBL: success for 1 of 1 queries 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: running meta tests; score so far=2.091 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: auto-learn? ham=0.1, spam=12, body-hits=1.074, head-hits=1.017 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: auto-learn: currently using scoreset 1. no need to recompute. 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: auto-learn? no: inside auto-learn thresholds 0:10:10 0:00:00 Dec 12 07:54:23 firewall spamd[22141]: debug: is spam? score=6.391 required=5 tes (*SNIP*) 0:11:54 0:01:44 Dec 12 07:56:07 firewall spamd[22141]: logmsg: identified spam (6.4/5.0) for daemon:10 in 714.0 seconds, 2515605 bytes. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Friday, December 12, 2003 12:57 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Re: SA Long Process Times / Memory Utilization > (Possible Bug?) > > > On Thu, 11 Dec 2003 15:42:55 -0700, Dan Tappin > <[EMAIL PROTECTED]> posted to spamassassin-talk: > > My hunch, which could be totally wrong, is that when parsing these > > messages the multiple headers in the Outlook attached messages is > > causing the problem. > > Do you generally manage to process large messages in SA without > problems? I'd basically expect any 1Mb-message to effectively hang my > machine. (Haven't tested with 2.61 though.) > > /* era */ ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
