Nicolas, > Good ... This morning amavis was again freezing with 99,9% CPU ... > The blocking (and "sending more than once") email was from a spammer > address to a local one, but it can happend from local to local or local to > distant too ...
Your log covers only few second of events. Which process was consuming CPU? Was it the pid 28957 ? How long did you leave it running? What happened next - did you kill it manually? I'll assume there were no other log entries from pid 28957 (even after killing it), following the entry below: > May 9 11:47:01 smtp.vet-lyon.fr /usr/sbin/amavisd[28957]: (28957-02) > calling SA parse, SA version 3.1.1 > May 9 11:47:01 smtp.vet-lyon.fr /usr/sbin/amavisd[28957]: (28957-02) > CALLING SA check So it looks like it was spinning within SA. Since you have a recent version of SA 3.1.1 (with no known defects leading to CPU spin), could it be you are using some unusual set of custom rules? (poorly written regexp could explain the situation) Having a recent version of Razor agents may help too. Btw, do you have AWL enabled (SA auto-whitelisting)? If so, check that the awl database is sane. Before you killed the process, it may have been useful to see what files it has open (lsof -p <pid>), snatch the email.txt from its temporary directory for later experimentation with the message (it may be still there in /var/amavis/amavis-20060509T114644-28957/email.txt), and attach to the process with 'strace -f -p <pid>' or with truss to see if it is calling any system routines in a loop, or just doing in-memory computations. With some luck, manually submitting the same message to a command-line SA would trigger the same problem: su vscan -c 'spamassassin -t -D <email.txt' If you are not so lucky to be able to repeat the problem at will, one possibility would be to run 'amavisd debug-sa' with stderr/stdout redirected to a file (which can grow very large). This could narrow down a problem to a test within SA. Unfortunately due to the size of such log file it may be impractical to leave it running for longer periods. Mark ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
