[SAtalk] Very Slow checking something.... over 30 seconds. Very rare problem

[David Velásquez Restrepo]

I have 2 machines, their Both have Linux Red Hat 7.3   1. Pentium IV - 2.4Ghz - 512 Ram RIM 2. Pentium III - 1000Mhz - 512 Ram DIM   The problem is, that the good machine (PIV) is taken a lot of time in one of the steps of spamassasin, but the other no, with exactly the same email file.   Please see the line market with a "<-----------------------":     [EMAIL PROTECTED] tmp]# cat 146471061936464525.eml | spamassassin -D debug: Score set 0 chosen. debug: running in taint mode? no debug: using "/usr/share/spamassassin" for default rules dir debug: using "/etc/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin" for user state dir debug: using "/root/.spamassassin/user_prefs" for user prefs file debug: using "/root/.spamassassin" for user state dir debug: bayes: 8073 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 8073 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: debug: Only 13 spam(s) in Bayes DB < 200 debug: bayes: 8073 untie-ing debug: bayes: 8073 untie-ing db_toks debug: bayes: 8073 untie-ing db_seen debug: Score set 1 chosen. debug: Initialising learner debug: using "/root/.spamassassin" for user state dir debug: bayes: 8073 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 8073 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: debug: Only 13 spam(s) in Bayes DB < 200 debug: bayes: 8073 untie-ing debug: bayes: 8073 untie-ing db_toks debug: bayes: 8073 untie-ing db_seen debug: is Net::DNS::Resolver available? yes debug: trying (3) slashdot.org... debug: looking up MX for 'slashdot.org' debug: MX for 'slashdot.org' exists? 1 debug: MX lookup of slashdot.org succeeded => Dns available (set dns_available to hardcode) debug: is DNS available? 1 debug: running header regexp tests; score so far=0 debug: running body-text per-line regexp tests; score so far=3.6 debug: running raw-body-text per-line regexp tests; score so far=3.6 debug: running uri tests; score so far=3.6 debug: uri tests: Done uriRE debug: running full-text regexp tests; score so far=3.6 debug: Current PATH is: /usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin debug: executable for dccproc was found at /usr/local/bin/dccproc debug: DCC is available: /usr/local/bin/dccproc debug: entering helper-app run mode debug: DCC: got response: X-DCC--Metrics: co3.conexcol.com 1049; Body=1 Fuz1=many debug: leaving helper-app run mode debug: DCC: Listed! BODY: 1 of 999999 FUZ1: 999999 of 999999 FUZ2: 0 of 999999 debug: Pyzor is not available: pyzor not found debug: all '*To' addrs: [EMAIL PROTECTED] debug: all '*From' addrs: [EMAIL PROTECTED]  <------------------ At this point the good machine takes more than 30 seconds. The other machine less than a second. debug: running meta tests; score so far=6.9 debug: auto-learn? safety=4, ham=-2, spam=15, body-hits=3, head-hits=6.9 debug: auto-learn: currently using scoreset 1.  no need to recompute. debug: auto-learn? no: inside auto-learn thresholds or safety zone around required_hits debug: is spam? score=11.4 required=5 tests=DATE_IN_PAST_03_06,DCC_CHECK,FORGED_MUA_OUTLOOK,FROM_NO_LOWER,INVALID_DATE,MICROSOFT_EXECUTABLE,MIME_BOUND_NEXTPART,MISSING_MIMEOLE,NO_REAL_NAME Received: from localhost [127.0.0.1] by co3.conexcol.com         with SpamAssassin (2.55 1.174.2.19-2003-05-19-exp);         Wed, 27 Aug 2003 13:08:20 -0500 From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Thank you! Date: Tue, 26 Aug 2003 17:32:38 --0500 Message-Id: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Status: Yes, hits=11.4 required=5.0         tests=DATE_IN_PAST_03_06,DCC_CHECK,FORGED_MUA_OUTLOOK,               FROM_NO_LOWER,INVALID_DATE,MICROSOFT_EXECUTABLE,               MIME_BOUND_NEXTPART,MISSING_MIMEOLE,NO_REAL_NAME         version=2.55 X-Spam-Level: *********** X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_3F4CF394.C3DB6DFB"   This is a multi-part message in MIME format.   ------------=_3F4CF394.C3DB6DFB               This happens with every message I try. In one machine the process is less than a second, in the other the process takes more than 30 seconds. Without any reason.   I tryied to find any fix to this problem, or any explanation, but I cant fin anyting... coul you help me to undesrtand what SpamAssassin does when it says:           debug: all '*From' addrs: [EMAIL PROTECTED]    Is any process runing at this ponit that could be taken lot of time?   Thanks,   David A. Velásquez R. [EMAIL PROTECTED]