Greg Cirelle Enterprises wrote:
> Sam Clippinger wrote:
>
>> Yes, it is. That's how syslogd logs all of its messages.
>>
>> -- Sam Clippinger
>>
>> Greg Cirelle Enterprises wrote:
>>
>>
>>> is the number in the logs between the [] the PID?
>>>
>>> does anybody have insight?
>>>
>>> greg
>>>
>>>
> for what it is worth, I just have debug logging and I noticed
> when folks that typically get large files, images, xls files
> as soon as it goes to ALLOW I get the high cpu reading
> in top.
>
> don't know if this helps or not, just an observation
>
> example
> Oct 14 17:40:18 trooper spamdyke[22601]:
> DEBUG(filter_rdns_missing()@filter.c:841): checking for missing rDNS;
> rdns: (unknown)
> Oct 14 17:40:18 trooper spamdyke[22601]: FILTER_RDNS_MISSING ip:
> 38.103.145.235
> Oct 14 17:40:18 trooper spamdyke[22601]:
> DEBUG(filter_ip_whitelist()@filter.c:1120): searching IP whitelist
> file(s); ip: 38.103.145.235
> Oct 14 17:40:18 trooper spamdyke[22601]:
> DEBUG(filter_sender_whitelist()@filter.c:1740): searching sender
> whitelist(s); sender: [EMAIL PROTECTED]
> Oct 14 17:40:19 trooper spamdyke[22601]:
> DEBUG(filter_recipient_whitelist()@filter.c:2106): searching recipient
> whitelist(s); recipient: [EMAIL PROTECTED]
> Oct 14 17:40:19 trooper spamdyke[22601]: FILTER_RECIPIENT_WHITELIST
> recipient: [EMAIL PROTECTED] file: /home/vpopmail/rcptwhitelst(5)
> Oct 14 17:40:19 trooper spamdyke[22601]:
> DEBUG(filter_recipient_relay()@filter.c:2176): checking relaying;
> relay-level: 3 recipient: [EMAIL PROTECTED] ip: 38.103.145.235 rdns:
> (unknown) local_recipient: true relaying_allowed: false
> Oct 14 17:40:19 trooper spamdyke[22601]: ALLOWED from:
> [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip:
> 38.103.145.235 origin_rdns: (unknown) auth: (unknown)
>
> This gave a 99.9% cpu in top
>
> greg
>
>
>
>
For what it is also worth, the email represented above was a 120K email
(with attachments - plural)
Content-Type: image/png;
name="image001.png"
Content-Transfer-Encoding: base64
Content-ID: <[EMAIL PROTECTED]>
-- the second was the large file ---
Content-Type: image/jpg;
name="vista.jpg"
Content-Transfer-Encoding: base64
Content-ID: <[EMAIL PROTECTED]>
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
