MailScanner consuming 100% CPU

[--[ UxBoD ]--]

Hmmm ...

Something not right me thinks ... the incoming directory only has headers and no content :(

[root at mailhub MailScanner]# cd incoming/
[root at mailhub incoming]# ls -lR
.:
total 12
drwxrwx--- 5 postfix clamav 4096 Feb 14 00:31 24771
drwxrwx--- 2 postfix clamav 4096 Feb 14 00:31 24818
drwxrwx--- 2 postfix clamav 4096 Feb 14 00:31 24853

./24771:
total 24
drwxrwx--- 2 postfix clamav 4096 Feb 14 00:31 882C8D02BA.66EC9
-rw-rw---- 1 postfix clamav 1135 Feb 14 00:31 882C8D02BA.66EC9.header
drwxrwx--- 2 postfix clamav 4096 Feb 14 00:31 9A670D02B8.069CB
-rw-rw---- 1 postfix clamav 3938 Feb 14 00:31 9A670D02B8.069CB.header
drwxrwx--- 2 postfix clamav 4096 Feb 14 00:31 C8EBFD02B9.1978E
-rw-rw---- 1 postfix clamav 3031 Feb 14 00:31 C8EBFD02B9.1978E.header

./24771/882C8D02BA.66EC9:
total 0

./24771/9A670D02B8.069CB:
total 0

./24771/C8EBFD02B9.1978E:
total 0

./24818:
total 0

./24853:
total 0


Regards,

-- 
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net

----- "--[ UxBoD ]--" <uxbod at splatnix.net> wrote:

> This evening my home server went crazy and when MS starts scanning a
> message it consumes 100% CPU :(
> 
> top shows :-
> 
> 20692 postfix   25   0  234m  67m 3968 R 99.7  2.2   3:20.57
> MailScanner  
> 
> if I run a message through using MS --debug it goes through SA fine
> :-
> 
> [20692] dbg: shortcircuit: s/c ham due to SC_HAM, using score of -100
> [20692] dbg: check: is spam? score=-20.001 required=5
> [20692] dbg: check: tests=NO_RELAYS,SC_HAM
> [20692] dbg: check: subtests=
> [20692] dbg: plugin:
> Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x6d2be20) implements
> 'compile_now_finish', priority 0
> max message size is '30k'
> 
> then it just hangs.  I have set Virus Scanners = none but it still
> does the same.  If I try and attach using strace nothing ever shows. 
> Any ideas I am really stuck :(
> 
> 
> Regards,