You can run DProf manually on SA and see what it says about rule timings.
Or at least you are supposed to be able to; the last time I tried it I
couldn't get it to work.
However, there may be a simpler answer. You didn't mention the amount of
ram you have nor the number of children you are running.
My bet is that the extra rules have increased the size of your spamd
children, and you have enough of them that you are now thrashing.
If you added every SARE rule file (or at least every one you are supposed to
add for 3.x) then you have probably doubled the size of your spamd children.
This means that they have gone from 30-40MB each to probably 40-60MB each,
or possibly a tad larger. If you had 5 children and 512MB, you probably
broke the bank.
Answer would be to FIRST make sure that you only have the rules files that
you should have for whichever version of SA you are running. (Far too many
people just grab everything, seemingly without noticing that some files are
only for certain versions of SA.)
Next, check the child sizes and available memory. Consider cutting back on
some rules files, or the number of children; or adding a stick of memory.
:-)
Loren
