Re: [qmailtoaster] High Server Load
Kyle Quillen wrote: Well I just ran it again and it went through but I did a reboot on the server since I last tried maybe that had something to do with it I am working on getting a filtering server setup now Does any one have a guide for setting up a filtering server in front of my toaster ? Did you ever get this resolved? - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] High Server Load
Kyle Quillen wrote: Well I just ran it again and it went through but I did a reboot on the server since I last tried maybe that had something to do with it That's probably the case. I am working on getting a filtering server setup now I sure hope that's the right solution for you, but it's hard to tell from this end, as you haven't answered some questions regarding numbers you're seeing. You might end up simply moving the same problem to a different box. Spamdyke should be catching upwards of 90% of your spam. If it isn't, then that could point to a different problem, and cause excessive scanning to be taking place. How many messages per minute are being scanned (roughly)? How long does is typically take to scan a message? Have you enabled any SA rules that might be causing scanning to use a lot more CPU? (such as fuzzyocr or some such) Does any one have a guide for setting up a filtering server in front of my toaster ? I don't know of one. Be sure to setup up spamdyke on the perimeter incoming processor. Spamdyke is pretty much useless processing mail that has been forwarded. Thanks -Original Message- From: Eric Shubert [EMAIL PROTECTED] Sent: Sunday, August 31, 2008 7:34 PM To: qmailtoaster-list@qmailtoaster.com qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Kyle Quillen wrote: Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 but for some reason it keeps bombing when i go to do a unionfs upgrade That shouldn't be happening with the current kernel. You're running kernel 2.6.18-92.1.10.el5? What's the error? here is what I have now qtp-whatami v0.3 DISTRO=CentOS OSVER=5.2 QTARCH=i686 BUILD_DIST=cnt50 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. I have ran all of the yum updates what would be the process of manually installing those three packages for the upgrade? thansk q -Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load You're running spamdyke, right? Kyle Quillen wrote: Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org
[qmailtoaster] High Server Load
Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q
Re: [qmailtoaster] High Server Load
Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [qmailtoaster] High Server Load
Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] winmail.dat- QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] High Server Load
You're running spamdyke, right? Kyle Quillen wrote: Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [qmailtoaster] High Server Load
Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 but for some reason it keeps bombing when i go to do a unionfs upgrade here is what I have now qtp-whatami v0.3 DISTRO=CentOS OSVER=5.2 QTARCH=i686 BUILD_DIST=cnt50 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. I have ran all of the yum updates what would be the process of manually installing those three packages for the upgrade? thansk q -Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load You're running spamdyke, right? Kyle Quillen wrote: Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] winmail.dat- QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] High Server Load
Kyle Quillen wrote: Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 but for some reason it keeps bombing when i go to do a unionfs upgrade That shouldn't be happening with the current kernel. You're running kernel 2.6.18-92.1.10.el5? What's the error? here is what I have now qtp-whatami v0.3 DISTRO=CentOS OSVER=5.2 QTARCH=i686 BUILD_DIST=cnt50 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. I have ran all of the yum updates what would be the process of manually installing those three packages for the upgrade? thansk q -Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load You're running spamdyke, right? Kyle Quillen wrote: Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] High Server Load
Kyle Quillen wrote: Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 What are the versions you're currently running? What are your typical scan times? How many active scans are typically running at once? (spamd log sample would be nice) CPU is buried, right? What processor/speed? RAM? Any paging going on? -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [qmailtoaster] High Server Load
-Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 5:08 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Kyle Quillen wrote: Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 What are the versions you're currently running? I am a version behind What are your typical scan times? How many active scans are typically running at once? (spamd log sample would be nice) CPU is buried, right? What processor/speed? RAM? Any paging going on? CPU is dual xeon 2.8ghz with 8 gigs of ram tell me what you want as far as the logs and i will grep them out for ya thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] winmail.dat- QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [qmailtoaster] High Server Load
Well I just ran it again and it went through but I did a reboot on the server since I last tried maybe that had something to do with it I am working on getting a filtering server setup now Does any one have a guide for setting up a filtering server in front of my toaster ? Thanks -Original Message- From: Eric Shubert [EMAIL PROTECTED] Sent: Sunday, August 31, 2008 7:34 PM To: qmailtoaster-list@qmailtoaster.com qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Kyle Quillen wrote: Yep sure am I tried to upgrade to the newest versions of the following New Qmail-Toaster Packages Available: squirrelmail-toaster-1.4.15-1.3.10 spamassassin-toaster-3.2.5-1.3.14 clamav-toaster-0.93.3-1.3.20 but for some reason it keeps bombing when i go to do a unionfs upgrade That shouldn't be happening with the current kernel. You're running kernel 2.6.18-92.1.10.el5? What's the error? here is what I have now qtp-whatami v0.3 DISTRO=CentOS OSVER=5.2 QTARCH=i686 BUILD_DIST=cnt50 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. I have ran all of the yum updates what would be the process of manually installing those three packages for the upgrade? thansk q -Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load You're running spamdyke, right? Kyle Quillen wrote: Thanks for the info Erik, I am working on this now and have already applied the spamassassin stuff. I did set the concurrency incoming to a lower amount earlier and loads seem to be coming down a little but spam filtering just takes too many resources I am working on the spamd servers now thanks q -Original Message- From: Erik A. Espinoza [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 4:26 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load Hey Kyle, Last we spoke this issue seems to be caused by too much mail coming in at once and causing the spamassassin to run very slow. There are a few things you could do. 1) Edit /var/qmail/supervise/spamd/run. After #!/bin/sh but before exec, add in these two lines: LANG=C export LANG This should make perl run a hell of a lot faster, as it will skip some of the internationalization stuff. 2) You can lower the amount of concurrencyincoming so as to keep less mail from being accepted at once. This should help spamd, and since other mail servers will retry it should cause no mail to be lost 3) You can get a few extra boxes and run spamassasin's spamd on it, and reconfigure spamc to use the other destiation hosts. This will require rebuilding the simscan package with --enable-spamc-args enabled for remote scanning. As far as making sure spam gets moved into the right folder, that's not easy to apply across the board. The only real way to do it would be to write a script that pulls the folder and ensures that the mailfilter is set in everyones home directory. Then just cron this to run every so often. Thanks, Erik On Sun, Aug 31, 2008 at 12:42 PM, Kyle Quillen [EMAIL PROTECTED] wrote: Hello all, I am once again seeing high server loads which are resulting in dups being sent to end users. I am looking for a little direction here. What I am wanting to do is setup a scanning server that serves as my primary mx and then forward the mail to the toaster server. The only questions are: 1. What does the list feel that I should use for the scanner server 2. How can I setup the toaster server to accept all mail tagged as ***Spam*** and put it into the spam folder? Also how would I just stop scanning and just process mail to help aleviate server load? If anyone else has any other suggestions I am all ears? Much thanks q -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] High Server Load
Kyle Quillen wrote: -Original Message- From: Eric Shubert [mailto:[EMAIL PROTECTED] Sent: Sun 8/31/2008 5:08 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] High Server Load What are your typical scan times? Answer? I've seen scan times vary considerably, but most seem to be sub-second on a VM toaster running on a single 2.8MH processor. Either your scan times are relatively (too?) high or you're scanning a boatload of emails. How many active scans are typically running at once? The 'child states' log messages give an indication of this. I'm guessing you're seeing a lot of s? How many Bs in a message typically? CPU is buried, right? What processor/speed? RAM? Any paging going on? CPU is dual xeon 2.8ghz with 8 gigs of ram Again, is CPU buried? I'm guessing no paging with 8G ram. tell me what you want as far as the logs and i will grep them out for ya Just a sample over several minutes when it's buried would do. Attach a tarball? You can send me a sample directly if you're concerned about sensitive information. Also, are you running any SA rules that aren't stock toaster? sa-update? -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
