My guess - if you examine the headers of your spam messages you will see that some message are 'autolearned'. Message that generate a high enough 'spam value' get internally fed to 'sa-learn' and are marked with 'autolearn=spam' in the X-Spam-Status header. Once a message has been trained via sa-learn it will not be 'learned from' again. To test this:
1)Submit a new spam/ham message to sa-learn and it will report Learned from 1 message(s) (1 message(s) examined) 2) Resubmit the same thing and you will get Learned from 0 message(s) (1 message(s) examined) This is my understanding - hope it is correct and that it helps. Summary: there are 2 ways a message will by 'examined' by sa-learn but not 'learned from'. a) if it was autolearned b) if it was trained previously On Mon, 10 Nov 2003 12:58:55 -0800, "Scott Renda" <[EMAIL PROTECTED]> wrote: >We have been using Spamassassin 2.60 since it came out. Prior to that, we >were using SA 2.54. I do have a question regarding sa-learn. > >It seems that the numbers I receive from sa-learn just don't add up. See >below for an example. I have a cron job that runs once a day that will run >usr/bin/sa-learn --spam --dir /var/spool/spam on a directory with all my >spam. Postfix is my MTA and I use a combo of Anomy/SA per the Advosys >scripts to dump all spam above a threshold into one directory for all users. >There are no per user SA settings at all. Since we upgraded from SA 2.54 to >2.60, the number of messages leanred and number of messages examined >differs. Below are the results of the cron job run this past three >mornings: > >Learned from 304 message(s) (30419 message(s) examined) >Learned from 253 message(s) (30430 message(s) examined) >Learned from 301 message(s) (30452 message(s) examined) > >It's says it's learning from the xxx # of messages, but not incrementing the >total amount examined by the same #. I have never manually deleted a >message out of this folder, and do not have any cron jobs doing this >automatically. I did successfully upgrade the Bayes DB as part of my >upgrade, and can query the Bayes DB successfully. Is there a way I can >check on the Bayes DB to see if it corrupt? Am I missing something? >Anybody else have a similar experience? TIA. > >Scott > > > >------------------------------------------------------- >This SF.Net email sponsored by: ApacheCon 2003, >16-19 November in Las Vegas. Learn firsthand the latest >developments in Apache, PHP, Perl, XML, Java, MySQL, >WebDAV, and more! http://www.apachecon.com/ >_______________________________________________ >Spamassassin-talk mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk