RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Jon Dossey
 From: Thomas Cameron [mailto:[EMAIL PROTECTED]
 Sent: Thursday, May 12, 2005 11:38 AM
 To: spamassassin-users; spamass-milt-list@nongnu.org
 Subject: [SOLVED] Re: Suddenly load average of 15-18???
 
 OK, this is a weird solution...  I rebooted the server and all the
 problems went away.  It's chuffing along happily now.
 
 Memory leak, maybe?


What kind of hardware?  Are you scanning zips?  I had to just start
blocking zip attachments all together until these virii settle down a
bit.


.jon



RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 11:46 -0500, Jon Dossey wrote:
  From: Thomas Cameron [mailto:[EMAIL PROTECTED]
  Sent: Thursday, May 12, 2005 11:38 AM
  To: spamassassin-users; spamass-milt-list@nongnu.org
  Subject: [SOLVED] Re: Suddenly load average of 15-18???
  
  OK, this is a weird solution...  I rebooted the server and all the
  problems went away.  It's chuffing along happily now.
  
  Memory leak, maybe?
 
 
 What kind of hardware?  Are you scanning zips?  I had to just start
 blocking zip attachments all together until these virii settle down a
 bit.
 
 
 .jon
 


It's just a plain Jane P-III 800MHz with 512MB memory on a 7-disk RAID 5
Ultra 160 SCSI array.  I have not disabled scanning of zip files.

It is running just fine now.  Very odd.

Thomas



RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Jon Dossey
 From: Thomas Cameron [mailto:[EMAIL PROTECTED]
 To: spamassassin-users
 Subject: RE: [SOLVED] Re: Suddenly load average of 15-18???
 
 On Thu, 2005-05-12 at 11:46 -0500, Jon Dossey wrote:
   From: Thomas Cameron [mailto:[EMAIL PROTECTED]
   Sent: Thursday, May 12, 2005 11:38 AM
   To: spamassassin-users; spamass-milt-list@nongnu.org
   Subject: [SOLVED] Re: Suddenly load average of 15-18???
  
   OK, this is a weird solution...  I rebooted the server and all the
   problems went away.  It's chuffing along happily now.
  
   Memory leak, maybe?
 
 
  What kind of hardware?  Are you scanning zips?  I had to just start
  blocking zip attachments all together until these virii settle down
a
  bit.
 
 
  .jon
 
 
 
 It's just a plain Jane P-III 800MHz with 512MB memory on a 7-disk RAID
5
 Ultra 160 SCSI array.  I have not disabled scanning of zip files.
 
 It is running just fine now.  Very odd.

This may only be a temporary fix.  Personally, rebooting a linux machine
to solve a problem just isn't acceptable.  Did you try restarting spamd
before rebooting?

I'd go through your maillog, and check the spamassassin processing
times, and see if you can pinpoint where the processing time shoots up.
Then, go through your mqueue and take a look at the offending message.

.jon



RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 12:20 -0500, Jon Dossey wrote:

 This may only be a temporary fix.  Personally, rebooting a linux machine
 to solve a problem just isn't acceptable.  Did you try restarting spamd
 before rebooting?

Several times.  I restarted the entire mail suite - sendmail, clam, SA,
milter-greylist, etc.

 I'd go through your maillog, and check the spamassassin processing
 times, and see if you can pinpoint where the processing time shoots up.
 Then, go through your mqueue and take a look at the offending message.

It wasn't just one message.  It was every message.

Thomas



Re: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread David Brodbeck
Thomas Cameron wrote:
On Thu, 2005-05-12 at 12:20 -0500, Jon Dossey wrote:
I'd go through your maillog, and check the spamassassin processing
times, and see if you can pinpoint where the processing time shoots up.
Then, go through your mqueue and take a look at the offending message.

It wasn't just one message.  It was every message.
I think what he's getting at is that one message can consume enough CPU 
and memory to bog down processing all the other ones, too.  I saw this 
with spamd and large attachments, before I started bypassing large 
messages around spamassassin.