Well, knock on wood. I added the snf folder to the exclusion list and it's been up around 40 minutes now. Will just have to wait and see, but I'm betting this was it. Kinda makes sense.
CE -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of John Doyle Sent: Friday, June 07, 2013 3:37 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes Chris Be sure your AV is not scanning the Imail directory, also that it's not doing real time scanning. what are you running for AV on the box and for declude to call? Try trimming things back in the global.cfg file comment out sniffer and see if that's it then comment everything else add things back in a section at a time. headers inbound outbound internal tests external tests filters bla bla bla you know the drill I've been running it for years on all sorts of platforms and found it pretty stable. John ---- Original Message ---- From: "Eastin, Christopher A." <[email protected]> Sent: 6/7/2013 12:05:00 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes No Diskkeeper or running backup. AV however... Hmmm... Think I'll add Declude and Sniffer to the exceptions list. Never bothered it before, but who knows. CE -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of David Barker Sent: Friday, June 07, 2013 2:54 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes Are you running DiskKeeper, Server AV or backup? Do any of these running times co-inside with the crashes ? David -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Eastin, Christopher A. Sent: Friday, June 7, 2013 3:39 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes Well, new server. Moved drives over. Everything came up as normal. Ran fine for a little while. Turned Declude back on. Server rebooted within 5 minutes. No noticeable spike in CPU or memory before the crash. Turned Declude off. Been running ok since. Very frustrating. Going to reduce the number of Declude threads to 75 as well as turn on WAITFORTHREADS as that is currently off. CE -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Darin Cox Sent: Friday, June 07, 2013 2:36 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes The sudden shutdowns sound like either a heat or disk controller issue to me... we've had similar situations in the past that were caused by one or the other. As for CPU spikes under normal load, we've seen that caused by a large number of files in a directory... say 2000 or more. Once we reduced the number of files to below 1000 performance returned to normal. Windows' file system simply can't deal with a large number of files in a frequently used directory. I would check the sniffer directories for a large number of leftover tmp and error files. These can pile up over time. Darin. -----Original Message----- From: Eastin, Christopher A. Sent: Friday, June 07, 2013 2:34 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes AVG and Commtouch are both turned off. We have changed Declude key. Memory is running about 700MB, with 5Gig free. CPU fluctuates between 11 and 35% on a constant basis. Every once in a while, it will spike up to 80 or 90% for a second or two. The process doing so is SNFServer. CE -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Friday, June 07, 2013 1:04 PM To: [email protected] Subject: [MBF]Re: Declude/IMail Server Crashes Sounds like a classic resource issue. Since this is happening so frequently, can you watch performance in taskmanager? I suspect you are running out of memory or CPU or both. Have you changed the declude configuration to ensure you are not trying to use Commtouch or AVG? Have you change the Declude key you are using? -----Original Message----- From: "Eastin, Christopher A." <[email protected]> Sent: Friday, June 7, 2013 8:29am To: [email protected] Subject: [MBF]Declude/IMail Server Crashes Hi All, We're having an odd issue with server crashes. We're using Imail with Declude on a server running Windows Server 2003, x64. Before Declude went away, everything worked fine (we were using Declude with Commtouch at the time). Every since Declude closed up shop and we started using Message Sniffer, we get random server crashes happening between a few minutes and a few hours but ONLY when using declude.exe as the sendname in the IMail registry. When using SMTPd32.exe (IMails SMTP engine) or SNFIMailshim.exe, the server stays up. However, you don't get much in the way of SPAM protection with using SMTPd32.exe and while Message Sniffer is a fine product and catches a lot of SPAM, it doesn't catch as much as Declude and Sniffer combined. Looking at the Event log just shows the server saying that the pervious shutdown was unexpected. I'm not seeing any unusual log entries either before or after the crashes. Has anyone run into anything similar and/or have any suggestions on what to look at? CE ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
