Hi Shayne, Way ahead of you:
http://mrtg.orourke.ca/firewall/cpu.html The yearly graph will show you when I first installed SA back in September. The realy ugly flatline's are since Tuesday. These were the periods today where I was hiding in the server room to avoind the endless "the server is down" phone calls / comments. :^) I seem to have it resolved. I have reduced the maximum number of concurent SMTP accept processes on my mail server and now things seem to be ok. We also have seemed to have been flooded with spam and viruses today which might have agrivated the issue. Dan > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Shayne Lebrun > Sent: Thursday, November 27, 2003 12:36 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Run Away SA... > > > > Step 1: > Install onto server net-snmp. > Step 2: > Somewhere else (or on the same server if you want) install MRTG or similar > product. > Step 3: > Configure SNMP daemon to report all sorts of nifty stuff; cpu, free memory, > free swap, file-system utilization, network load, number of processes > running (whichever processes are giving you grief), message volume, and so > on. > Step 4: > Configure MRTG or similar product to get this information from SNMP daemon. > Make pretty graphs. > Step 5: > Stare at pretty graphs. EVERYTHING will make more sense after it's in > pretty graph format. You'll see exactly what's spiking where, what's > running out when, and what's happening at the same time; nifty stuff. > Step 6: > Do whatever's required to make the pretty graphs stop doing whatever looks > wrong in step 5. > Step 7: Repeat steps 5 and 6 every once in a while. > > Contact me off list if you want to see some examples of my own pretty > graphs. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dan > Tappin > Sent: Thursday, November 27, 2003 1:43 PM > To: Robert A. Hayden > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Run Away SA... > > > I tried skipping the rbl already with no luck. > > Here is my current ps output with half of my rules disabled: > > [firewall:/etc/mail/spamassassin] admin# ps -aux | grep spam > mta 4640 41.7 20.9 174920 164612 ?? R 11:14AM 15:50.12 > /usr/bin/spamd -u mta -d -r /var/run/spamd.pid > mta 4916 37.0 18.0 155332 141792 ?? R 11:26AM 4:46.39 > /usr/bin/spamd -u mta -d -r /var/run/spamd.pid > mta 4570 0.0 0.8 17388 6156 ?? Ss 11:12AM 0:03.14 > /usr/bin/spamd -u mta -d -r /var/run/spamd.pid > > This is not that bad. Typically it gets to 15+ processes and then a manual > hard reboot is required. > > This system has 700+ MB or RAM. > > Dan > > > -----Original Message----- > > From: Robert A. Hayden [mailto:[EMAIL PROTECTED] > > Sent: Thursday, November 27, 2003 11:35 AM > > To: Dan Tappin > > Cc: [EMAIL PROTECTED] > > Subject: Re: [SAtalk] Run Away SA... > > > > > > Make sure RBL is disabled. > > > > skip_rbl_checks 1 > > > > also, execute spamd (you are using spamd, right?) using the -m flag and > > make sure that number is high enough. I use -m25 and handle about 50k > > messages/week with no problem. > > > > Also, memory is critical on a system. If you are below 256mb, it can't > > hurt to throw some in. > > > > On Thu, 27 Nov 2003, Dan Tappin wrote: > > > > > I have a 2.6 SA installation that has recently started to take off > process wise. > > > > > > SA starts and then runs normally for 5 to 10 minutes then the processes > start to pile up. I get 10 to 15 spamd > > processes spawning > > > and they soon consume all the system resources and eventually hangs the > machine. 'top' shows perl taking all the > > system resources. > > > I am running perl v5.6 if that helps. > > > > > > I have a secondary mail server with the same set-up and same rule set. > The machine definitely has more incoming mail > > which might be > > > part of the problem. > > > > > > What is the best way to trouble shoot this??? I have run > spamassassin --lint -D and also tried disabling RBL look-ups > > on a hunch. > > > > > > Do I basically need to disable config files one by one and watch for the > problem to go away? > > > > > > Thanks, > > > > > > Dan > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] Behalf Of > Tobin > > > > Sent: Wednesday, November 26, 2003 7:55 AM > > > > To: [EMAIL PROTECTED] > > > > Subject: [SAtalk] Building a bayes database > > > > > > > > > > > > I was wondering if anyone could help. I run GW 6.5 standalone with SA > > > > running on a windows 2000 server with Guinevere. Im building the bayes > > > > database and trying to figure out the best way to do it. > > > > > > > > I have collect 1000+ ham by individually saving them to disk as > > > > mime.001, mime 002 etc. I have a inbox with 10,000+ spam. Is there a > > > > faster way to save these to disk so I can run sa-learn? Can I point > > > > sa-learn to the mailbox? Any help would be great. > > > > > > > > Thanks > > > > > > > > Josh > > > > > > > > > > > > ------------------------------------------------------- > > > > This SF.net email is sponsored by: SF.net Giveback Program. > > > > Does SourceForge.net help you be more productive? Does it > > > > help you create better code? SHARE THE LOVE, and help us help > > > > YOU! Click Here: http://sourceforge.net/donate/ > > > > _______________________________________________ > > > > Spamassassin-talk mailing list > > > > [EMAIL PROTECTED] > > > > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.net email is sponsored by: SF.net Giveback Program. > > > Does SourceForge.net help you be more productive? Does it > > > help you create better code? SHARE THE LOVE, and help us help > > > YOU! Click Here: http://sourceforge.net/donate/ > > > _______________________________________________ > > > Spamassassin-talk mailing list > > > [EMAIL PROTECTED] > > > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
