Sandeep Agarwal wrote: > > checked the logs after sending a mail size 6MB. > reading the logs its clear that this is not clamd > problem. its something else, whats the "w_c:elapsed > time" in the log below ? i guess its the time waiting > in the queue. if yes how can this be fixed ? > You don't include the entire log for that particular mail message being processed (and I'm sure the readers of this list appreciate that as this isn't a ClamAV problem). One of those timestamps will be much larger than the others, so that's the one that is the cause of the problem.
Are you sure you don't have an actual network problem? If none of the Qmail-Scanner subprocesses is responsible for the large times, then there is only one other option - network. Having mismatched duplex settings on the server's Ethernet card can do this, as well as long-distance-over-unreliable-links SMTP clients. i.e. maybe 1299 of those 1300 seconds is actually how long it took the message to be written to the queue - which indicates a slow network - not a software problem. The new release of Qmail-Scanner specifically separates out that time now - for this very reason. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
