On Fri, 12 Nov 2021, Philip Prindeville wrote:
I got the message, saved it to a flat file, and ran "spamassassin -t -D rules <
netdev.eml" and saw:
...
Nov 12 11:45:38.048 [36367] dbg: rules: ran eval rule __ANY_TEXT_ATTACH_DOC
======> got hit (1)
...
Nov 12 11:45:38.063 [36367] dbg: rules: ran eval rule __ANY_TEXT_ATTACH ======>
got hit (1)
Nov 12 11:49:58.565 [36367] info: check: exceeded time limit in
Mail::SpamAssassin::Plugin::Check::_eval_tests_type11_pri0_set1, skipping
further tests
...
Am I correct that __ANY_TEXT_ATTACH alone took 4:30s?
"ran ... got hit" is past tense. And it needs to complete the rule to know
whether it got a hit.
11:45:38.048 -> 11:45:38.063 = less than 20 msec.
The next rule, whatever that was, is the one that timed out after 4m20s.
Could there be rules that *aren't* matching but are taking a while?
It's timing out on a rule that's running away. The timeout triggers before
"hit/no hit" is known.
What would be helpful here would be logging of when a rule *starts*
evaluation. Normally that would be painful, but for tracking a runaway it
would be useful. Perhaps I can code up something to capture that and log
it on a timeout...
If you want to send me that message zipped up I can try it here with those
changes and see if it's a base rule running away.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
The most glaring example of the cognitive dissonance on the left
is the concept that human beings are inherently good, yet at the
same time cannot be trusted with any kind of weapon, unless the
magic fairy dust of government authority gets sprinkled upon them.
-- Moshe Ben-David
-----------------------------------------------------------------------
531 days since the first private commercial manned orbital mission (SpaceX)
