Re: [Declude.JunkMail] Massive CPU usage

James Nelson Tue, 25 May 2004 16:10:54 -0700

R. Scott Perry wrote:

Over the last week or so we have been getting terrible performance, mostly noticed through SMTP (either not accepting connections on port 25 or really slow response). I have not been able to find any errors reported in Imail or Declude. Watching Task Manager shows the CPU maxed at 100% almost all of the time, and usually one of many Declude.exe processes using most of it. Occasionally one of the other Imail services will spike (queuemgr.exe, smtpd32.exe, or pop3d32.exe usually), but not for more than a few seconds. I've tried both Declude 1.75 release & 1.79 beta, but both do the same thing. Server stats follow:
Do you have a lot of BODY filters, or other types of filters that would use a lot of CPU time (such as filters with thousands of lines in them)?

I have a fair number of filters that were obtained from http://www.mailpure.com/software/decludefilters/. I have been using these for months without a problem, but I can disable them for testing. Here is a list of the ones I am using: @LINKED [EMAIL PROTECTED] FOREIGN TLD-AFRICAN TLD-ASIAN TLD-CARIBBEAN TLD-CENTRALAMERICAN TLD-EASTERNEUROPEAN TLD-MIDDLEEASTERN TLD-OCEANIC TLD-SOUTHAMERICAN TLD-WESTERNEUROPEAN TLD-TRUSTED-HELO TLD-TRUSTED-MAILFROM TLD-TRUSTED-REVDNS GIBBERISH ANTI-GIBBERISH GIBBERISHSUB ANTI-GIBBERISHSUB IPLINKED Y!DIRECTED ANTI-Y!DIRECTED

Are you using F-Prot.exe with Declude Virus (which wouldn't cause high CPU usage in the Declude.exe process, but could cause slow SMTP response)? If so, switching to the 32-bit fpcmd.exe (and removing the /NOFLOPPY switch in the SCANFILE line in your virus.cfg file) would fix it.

I am using F-Prot for virus scanning. Everytime I've tried using the fpcmd.exe scanner it fails to detect anything. I'll try this again. My current scanfile line is as follows:

SCANFILE D:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt

I also just found something else unusual.  Running spoolviewer showed:

D:\IMail\tools>SpoolViewer.exe

# E-mails being received right now:         4677
# E-mails being delivered right now:        11 [23 recips]
# E-mails awaiting re-tries:                2 [2 recips]
# E-mails awaiting first delivery attempt:  0 [0 recips]
# Overflow E-mails:                         0 [0 recips]
# Orphaned E-mails:                         4904

I don't think I've ever seen this many orphaned emails before, and the similarity between the first & last were startling. So I used isplcln.exe to delete messages that were older than 2 days and got this:

D:\IMail\tools>SpoolViewer.exe

# E-mails being received right now:         2293
# E-mails being delivered right now:        52 [60 recips]
# E-mails awaiting re-tries:                78 [80 recips]
# E-mails awaiting first delivery attempt:  0 [0 recips]
# Overflow E-mails:                         0 [0 recips]
# Orphaned E-mails:                         2373

Not sure what it means, but it might provide a hint (or a distraction, not sure which).

::James Nelson
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Massive CPU usage

Reply via email to