Matt Kettler wrote:
At 02:04 PM 2/25/2005, Jerome Cartagena wrote:
The main reason I believe this is a performance issue is the strange flat line that is demonstrated by the graph. Although it concerns me that I get much more HAM than SPAM (I believe current industry standards report 80+% spam traffic), I simply can't explain why we are hitting that kind of upper limit.
You mean why the spam rate is more-or-less constant?
That's pretty normal..
If you look at my graphs, they are a spam count for the day, resetting at midnight.. The fairly even rate of spam makes a nice, relatively even, sawtooth pattern. Changes in spam rate would make the sawtooth's curve. They do show a slight mid-day hump, but not by much.
http://xanadu.evitechnology.com/mailscanner-mrtg/spam/spam.html
Compare to my mail total graphs, which show significant curving due to mid-day ham levels being higher than mid-night ham levels:
http://xanadu.evitechnology.com/mailscanner-mrtg/mail/mail.html
If you're using mailscanner, a symptom of an overloaded system will be /var/spool/mqueue.in getting crowded. When the number of files in that directory keeps growing it means mail is coming in faster than MailScanner can feed it to SA and the AV tools. (Note: this is different than /var/spool/mqueue, which will get crowded when there's undeliverable messages)
Same kind of humpi-ness here, with a larger sample (see attached) (the milter is milter-dnsrbl, using spamhaus rbl)
Ken Pacific.Net
<<inline: spam.png>>
