On Fri, 10 Mar 2006, Daryl C. W. O'Shea wrote:

On 3/10/2006 11:22 AM, Dan Mahoney, System Admin wrote:

I of course have no idea what to make of this output.  Pointers?

Each line is one file descriptor. So it doesn't appear that it's using an insane number of them.

Next time spamd hangs up, you might want to do this check though.


I'm outta ideas... I don't know if Justin will have any ideas without a full strace of a problem spamd parent and children (which could be difficult in getting with the amount of messages processed by your system).

Okay,

I'm still getting these issues. I've corrected every other issue that's plagued us, and the thing still locks up. USUALLY when a user gets some form of dictionary spam. For the users I can identify I've been keeping copies of their stuff.

NOTE: This is under a stock 3.1.1, if there are any other patches I should be using from the previous conversations that are NOT in 3.1.1, please let me know, and I'll make sure I have those too. I'm seeing lots of the following:

Mar 30 21:52:14 quark spamd[45835]: __alarm__
Mar 30 21:52:14 quark spamd[45835]: __alarm__
Mar 30 21:52:14 quark spamd[45835]: spamd: copy_config timeout (with empty $@), respawning child process after 25 messages at /usr/local/bin/spamd line 982.
Mar 30 21:52:16 quark spamd[52479]: __alarm__
Mar 30 21:52:16 quark spamd[52479]: __alarm__
Mar 30 21:52:16 quark spamd[52479]: spamd: copy_config timeout (with empty $@), respawning child process after 9 messages at /usr/local/bin/spamd line 982.

And also some of this:

Mar 30 21:52:31 quark spamd[42292]: syswrite() on closed filehandle GEN88 at /usr/local/lib/perl5/5.8.6/mach/IO/Handle.pm line 451. Mar 30 21:52:31 quark spamd[42292]: Use of uninitialized value in concatenation (.) or string at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 330. Mar 30 21:52:31 quark spamd[42292]: prefork: write of ping failed to 52479 fd=: at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 330. Mar 30 21:52:31 quark spamd[42292]: Use of uninitialized value in concatenation (.) or string at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 127. Mar 30 21:52:31 quark spamd[42292]: prefork: killing failed child 52479 fd= at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 127. Mar 30 21:52:31 quark spamd[42292]: prefork: killed child 52479 at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 141. Mar 30 21:52:31 quark spamd[42292]: syswrite() on closed filehandle GEN70 at /usr/local/lib/perl5/5.8.6/mach/IO/Handle.pm line 451. Mar 30 21:52:31 quark spamd[42292]: Use of uninitialized value in concatenation (.) or string at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 330. Mar 30 21:52:31 quark spamd[42292]: prefork: write of ping failed to 45835 fd=: at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 330. Mar 30 21:52:31 quark spamd[42292]: Use of uninitialized value in concatenation (.) or string at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 127. Mar 30 21:52:31 quark spamd[42292]: prefork: killing failed child 45835 fd= at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 127. Mar 30 21:52:31 quark spamd[42292]: prefork: killed child 45835 at /usr/local/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/SpamdForkScaling.pm line 141.

Example at or around Mar 30 01:48:16 in this file:

http://www.gushi.org/maillog33106-0.txt

And another similar lockup at Mar 30 21:49:50 -- SAME USER, go figure.

I don't have archived copies of this user's mail -- yet. I've set up archiving for them, and we have everything from now forward, but I'm convinced there's SOMETHING in the spam they're getting that causes a lockup.

-Dan

--

"I love you forever eternally."

-Connaian Expression

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------

Reply via email to