high cpu usage!!!
kfliong
kfliong at WOFS.COM
Wed Dec 24 11:24:29 GMT 2003
I can check but most of the time i am clueless about the logs entry
Dec 24 19:16:13 ensim virthostmail[12899]: Chrooting to /home/virtual/site9/fst
Dec 24 19:16:13 ensim sendmail[12901]: hBP0GDi12901:
from=<lamont.connolly_jf at btclick.com>, size=1336, class=0, nrcpts=1,
msgid=<200312250016.hBP0G9p12888 at ensim.wofsproperties.com>, proto=ESMTP,
relay=root at localhost
Dec 24 19:16:13 ensim sendmail[12897]: hBP0G9p12888:
to=<bmfrosty at worldoffengshui.com>, delay=00:00:04, xdelay=00:00:00,
mailer=virthostmail, pri=120871, relay=worldoffengshui.com, dsn=2.0.0,
stat=Sent (hBP0GDi12901 Message accepted for delivery)
Dec 24 19:16:14 ensim MailScanner[10992]: Virus and Content Scanning: Starting
Dec 24 19:16:14 ensim sendmail[12902]: hBP0GDi12901: to=/dev/null,
ctladdr=site_blackhole (513/0), delay=00:00:01, xdelay=00:00:00,
mailer=*file*, pri=30653, dsn=2.0.0, stat=Sent
Dec 24 19:16:15 ensim MailScanner[10992]: Uninfected: Delivered 1 messages
Dec 24 19:16:15 ensim virthostmail[12910]: Chrooting to /home/virtual/site9/fst
Dec 24 19:16:15 ensim sendmail[12912]: hBP0GFO12912:
from=<greggritter_rn at umr.edu>, size=1327, class=0, nrcpts=1,
msgid=<200312250016.hBP0G7p12885 at ensim.wofsproperties.com>, proto=ESMTP,
relay=root at localhost
Dec 24 19:16:15 ensim sendmail[12908]: hBP0G7p12885:
to=<bmercier at worldoffengshui.com>, delay=00:00:07, xdelay=00:00:00,
mailer=virthostmail, pri=120862, relay=worldoffengshui.com, dsn=2.0.0,
stat=Sent (hBP0GFO12912 Message accepted for delivery)
Dec 24 19:16:15 ensim sendmail[12913]: hBP0GFO12912: to=/dev/null,
ctladdr=site_blackhole (513/0), delay=00:00:00, xdelay=00:00:00,
mailer=*file*, pri=30655, dsn=2.0.0, stat=Sent
Dec 24 19:16:20 ensim sendmail[12915]: hBP0GGp12915:
from=<ap2didwof at easynet.fr>, size=1750, class=0, nrcpts=1,
msgid=<v$46-r$17wzf2-2j3-0iz1v280w9 at mgrb78lg>, proto=SMTP, daemon=MTA,
relay=CPE0050bf919e82-CM0000394a0266.cpe.net.cable.rogers.com [63.139.225.125]
Dec 24 19:16:20 ensim sendmail[12915]: hBP0GGp12915:
to=<eshih at worldoffengshui.com>, delay=00:00:03, mailer=virthostmail,
pri=31750, stat=queued
Dec 24 19:16:22 ensim MailScanner[10928]: New Batch: Found 2 messages waiting
Dec 24 19:16:22 ensim MailScanner[10928]: New Batch: Scanning 1 messages,
2407 bytes
Dec 24 19:16:22 ensim MailScanner[10928]: Spam Checks: Starting
Dec 24 19:16:27 ensim sendmail[12924]: hBP0GQp12924: from=<tgrmf at aol.com>,
size=10549, class=0, nrcpts=1,
msgid=<200312250016.hBP0GQp12924 at ensim.wofsproperties.com>, proto=SMTP,
daemon=MTA, relay=[211.208.160.118]
Dec 24 19:16:27 ensim sendmail[12924]: hBP0GQp12924:
to=<jyork at worldoffengshui.com>, delay=00:00:01, mailer=virthostmail,
pri=40549, stat=queued
Dec 24 19:16:28 ensim MailScanner[10910]: New Batch: Found 3 messages waiting
Dec 24 19:16:28 ensim MailScanner[10910]: New Batch: Scanning 1 messages,
11079 bytes
Dec 24 19:16:28 ensim MailScanner[10910]: Spam Checks: Starting
Dec 24 19:16:29 ensim sendmail[12926]: hBP0GRp12926:
from=<antoinecisneroslo at iol.pt>, size=871, class=0, nrcpts=1,
msgid=<200312250016.hBP0GRp12926 at ensim.wofsproperties.com>, proto=ESMTP,
daemon=MTA, relay=200-153-194-224.dsl.telesp.net.br [200.153.194.224]
Dec 24 19:16:29 ensim sendmail[12926]: hBP0GRp12926:
to=<bmeeks at worldoffengshui.com>, delay=00:00:01, mailer=virthostmail,
pri=30871, stat=queued
Dec 24 19:16:30 ensim MailScanner[10992]: New Batch: Found 4 messages waiting
Dec 24 19:16:30 ensim MailScanner[10992]: New Batch: Scanning 1 messages,
1456 bytes
Dec 24 19:16:30 ensim MailScanner[10992]: Spam Checks: Starting
Dec 24 19:16:31 ensim sendmail[12931]: hBP0GTp12931:
from=<tmcDowellgr at greenapple.com>, size=869, class=0, nrcpts=1,
msgid=<200312250016.hBP0GTp12931 at ensim.wofsproperties.com>, proto=ESMTP,
daemon=MTA, relay=200-153-194-224.dsl.telesp.net.br [200.153.194.224]
Dec 24 19:16:31 ensim sendmail[12931]: hBP0GTp12931:
to=<bmichael at worldoffengshui.com>, delay=00:00:01, mailer=virthostmail,
pri=30869, stat=queued
Dec 24 19:16:31 ensim MailScanner[10928]: Message hBP0GGp12915 from
63.139.225.125 (ap2didwof at easynet.fr) to worldoffengshui.com is spam,
SpamAssassin (score=18.783, required 5, BAYES_90 2.10, CLICK_BELOW 0.10,
DATE_IN_PAST_12_24 0.75, FORGED_MUA_OIMO 2.40, FORGED_OUTLOOK_TAGS 1.00,
HTML_FONT_BIG 0.27, HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10,
MIME_HTML_NO_CHARSET 0.56, MIME_HTML_ONLY 0.32, MIME_HTML_ONLY_MULTI 1.10,
ONLINE_PHARMACY 3.77, RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_DSBL 0.71,
RCVD_IN_DYNABLOCK 2.60, RCVD_IN_SORBS 0.10, X_PRIORITY_HIGH 1.30)
Dec 24 19:16:31 ensim MailScanner[10928]: Spam Checks: Found 1 spam messages
Dec 24 19:16:31 ensim MailScanner[10928]: Spam Actions: message
hBP0GGp12915 actions are delete
Dec 24 19:16:31 ensim MailScanner[10928]: Virus and Content Scanning: Starting
Dec 24 19:16:32 ensim MailScanner[10984]: New Batch: Found 4 messages waiting
Dec 24 19:16:32 ensim MailScanner[10984]: New Batch: Scanning 1 messages,
1460 bytes
Dec 24 19:16:32 ensim MailScanner[10984]: Spam Checks: Starting
Dec 24 19:16:33 ensim MailScanner[10984]: Message hBP0GTp12931 from
200.153.194.224 (tmcdowellgr at greenapple.com) to worldoffengshui.com is
spam, SpamAssassin (score=6.652, required 5, BAYES_30 -0.90, BIZ_TLD 0.10,
DATE_IN_PAST_12_24 0.75, HTML_MESSAGE 0.10, MIME_HTML_NO_CHARSET 0.56,
MIME_HTML_ONLY 0.32, MSGID_FROM_MTA_SHORT 3.03, RCVD_IN_DYNABLOCK 2.60,
RCVD_IN_SORBS 0.10)
Dec 24 19:16:34 ensim MailScanner[10984]: Spam Checks: Found 1 spam messages
Dec 24 19:16:34 ensim MailScanner[10984]: Spam Actions: message
hBP0GTp12931 actions are delete
Dec 24 19:16:34 ensim MailScanner[10984]: Virus and Content Scanning: Starting
Dec 24 19:16:34 ensim sendmail[12938]: hBP0GWp12938: from=<brqhfg at web.de>,
size=4545, class=0, nrcpts=1, msgid=<n32r235do42opl4l58isqc$4iho at vym.5h>,
proto=SMTP, daemon=MTA, relay=modemcable076.176-131-66.mc.videotron.ca
[66.131.176.76]
Dec 24 19:16:34 ensim sendmail[12938]: hBP0GWp12938:
to=<bharati at worldoffengshui.com>, delay=00:00:02, mailer=virthostmail,
pri=34545, stat=queued
Dec 24 19:16:34 ensim sendmail[12930]: hBP0GTp12930:
from=<kbarber_ul at ccd.vol.at>, size=1378, class=0, nrcpts=1,
msgid=<200312250016.hBP0GTp12930 at ensim.wofsproperties.com>, proto=ESMTP,
daemon=MTA, relay=cable-228-56.inter.net.il [80.230.228.56]
Dec 24 19:16:34 ensim sendmail[12930]: hBP0GTp12930:
to=<kkiser at worldoffengshui.com>, delay=00:00:02, mailer=virthostmail,
pri=31378, stat=queued
Dec 24 19:16:35 ensim MailScanner[10992]: Virus and Content Scanning: Starting
Dec 24 19:16:35 ensim MailScanner[10984]: New Batch: Found 5 messages waiting
Dec 24 19:16:35 ensim MailScanner[10984]: New Batch: Scanning 2 messages,
7074 bytes
Dec 24 19:16:35 ensim MailScanner[10984]: Spam Checks: Starting
Dec 24 19:16:36 ensim MailScanner[10984]: Message hBP0GTp12930 from
80.230.228.56 (kbarber_ul at ccd.vol.at) to worldoffengshui.com is spam,
SpamAssassin (score=9.354, required 5, BAYES_50 0.00, BIZ_TLD 0.10,
HTML_MESSAGE 0.10, MIME_HTML_MOSTLY 1.24, MSGID_FROM_MTA_HEADER 0.70,
RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_DSBL 0.71, RCVD_IN_DYNABLOCK 2.60,
RCVD_IN_SORBS 0.10, RCVD_IN_SORBS_HTTP 1.10, RCVD_IN_SORBS_SOCKS 1.20)
Dec 24 19:16:36 ensim MailScanner[10992]: Uninfected: Delivered 1 messages
Dec 24 19:16:36 ensim sendmail[12941]: hBP0GXp12941:
from=<qrqfybgkvra at mail.ru>, size=1394, class=0, nrcpts=2,
msgid=<EYMGZXX-0000484823455 at covenant>, proto=SMTP, daemon=MTA,
relay=h24-86-167-208.vs.shawcable.net [24.86.167.208]
Dec 24 19:16:36 ensim sendmail[12941]: hBP0GXp12941:
to=<taji at worldoffengshui.com>, delay=00:00:02, mailer=virthostmail,
pri=61394, stat=queued
Dec 24 19:16:36 ensim sendmail[12941]: hBP0GXp12941:
to=<talks at worldoffengshui.com>, delay=00:00:02, mailer=virthostmail,
pri=61394, stat=queued
Dec 24 19:16:36 ensim virthostmail[12958]: Chrooting to /home/virtual/site9/fst
Dec 24 19:16:36 ensim sendmail[12961]: hBP0Gak12961:
from=<antoinecisneroslo at iol.pt>, size=1342, class=0, nrcpts=1,
msgid=<200312250016.hBP0GRp12926 at ensim.wofsproperties.com>, proto=ESMTP,
relay=root at localhost
Dec 24 19:16:36 ensim sendmail[12956]: hBP0GRp12926:
to=<bmeeks at worldoffengshui.com>, delay=00:00:08, xdelay=00:00:00,
mailer=virthostmail, pri=120871, relay=worldoffengshui.com, dsn=2.0.0,
stat=Sent (hBP0Gak12961 Message accepted for delivery)
Dec 24 19:16:37 ensim sendmail[12962]: hBP0Gak12961: to=/dev/null,
ctladdr=site_blackhole (513/0), delay=00:00:01, xdelay=00:00:00,
mailer=*file*, pri=30660, dsn=2.0.0, stat=Sent
Dec 24 19:16:37 ensim sendmail[12953]: hBP0GZp12953:
from=<mwxrklxj at cix.co.uk>, size=2733, class=0, nrcpts=1,
msgid=<3zpiw$v-h08a03$78$9ws2cb353m0v at avo2g>, proto=SMTP, daemon=MTA,
relay=[61.74.12.125]
Dec 24 19:16:37 ensim sendmail[12953]: hBP0GZp12953:
to=<info at jennifer-too.com>, delay=00:00:02, mailer=virthostmail, pri=32733,
stat=queued
Dec 24 19:16:37 ensim MailScanner[10984]: Message hBP0GWp12938 from
66.131.176.76 (brqhfg at web.de) to worldoffengshui.com is spam, SpamAssassin
(score=14.337, required 5, BAYES_99 5.40, DATE_IN_PAST_12_24 0.75,
HTML_MESSAGE 0.10, HTML_TAG_BALANCE_A 0.20, MIME_BASE64_TEXT 1.01,
MIME_HTML_NO_CHARSET 0.56, MIME_HTML_ONLY 0.32, MIME_HTML_ONLY_MULTI 1.10,
RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_DSBL 0.71, RCVD_IN_DYNABLOCK 2.60,
RCVD_IN_SORBS 0.10)
Dec 24 19:16:37 ensim MailScanner[10984]: Spam Checks: Found 2 spam messages
Dec 24 19:16:37 ensim MailScanner[10984]: Spam Actions: message
hBP0GTp12930 actions are delete
Dec 24 19:16:37 ensim MailScanner[10984]: Spam Actions: message
hBP0GWp12938 actions are delete
Dec 24 19:16:37 ensim MailScanner[10984]: Virus and Content Scanning: Starting
Dec 24 19:16:37 ensim sendmail[12951]: hBP0GZp12951:
from=<rblevins_kt at onetelnet.nl>, size=1387, class=0, nrcpts=1,
msgid=<200312250016.hBP0GZp12951 at ensim.wofsproperties.com>, proto=ESMTP,
daemon=MTA, relay=cable-228-56.inter.net.il [80.230.228.56]
Dec 24 19:16:37 ensim sendmail[12951]: hBP0GZp12951:
to=<klamka at worldoffengshui.com>, delay=00:00:02, mailer=virthostmail,
pri=31387, stat=queued
Dec 24 19:16:38 ensim MailScanner[10928]: New Batch: Found 5 messages waiting
Dec 24 19:16:38 ensim MailScanner[10928]: New Batch: Scanning 3 messages,
7090 bytes
Dec 24 19:16:38 ensim MailScanner[10928]: Spam Checks: Starting
Dec 24 19:16:39 ensim MailScanner[10928]: Message hBP0GZp12951 from
80.230.228.56 (rblevins_kt at onetelnet.nl) to worldoffengshui.com is spam,
SpamAssassin (score=9.354, required 5, BAYES_50 0.00, BIZ_TLD 0.10,
HTML_MESSAGE 0.10, MIME_HTML_MOSTLY 1.24, MSGID_FROM_MTA_HEADER 0.70,
RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_DSBL 0.71, RCVD_IN_DYNABLOCK 2.60,
RCVD_IN_SORBS 0.10, RCVD_IN_SORBS_HTTP 1.10, RCVD_IN_SORBS_SOCKS 1.20)
I am getting tons of mails in mqueue.in. I have deleted them and now they
are building up again....
At 07:16 PM 12/24/2003, you wrote:
>Check your mail log for any reports from MailScanner.
>
>At 10:11 24/12/2003, you wrote:
>>I am getting very high cpu usage by mailscanner.
>>
>>177 processes: 163 sleeping, 3 running, 0 zombie, 11 stopped
>>CPU states: 18.2% user, 4.0% system, 1.0% nice, 31.5% idle
>>Mem: 504792K av, 474500K used, 30292K free, 1508K shrd, 42668K buff
>>Swap: 1020116K av, 137800K used, 882316K free 99664K
>>cached
>>
>> PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
>>31972 root 14 0 25432 20M 12324 R 85.0 4.2 0:19 MailScanner
>>32019 apache 9 0 10200 7456 5636 S 7.5 1.4 0:00 httpd
>>32081 root 9 0 1104 1104 804 R 3.7 0.2 0:00 top
>>32028 apache 9 0 9024 6280 5516 S 0.9 1.2 0:00 httpd
>>
>>
>>Please help!
>>
>>thanks
>
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
thanks
More information about the MailScanner
mailing list