<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.2800.1106" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Hi
All,</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>I've been having
problems with one of my e-mail gateways today - the load average has been
spiking at 1.90 with no unusual increase in mail volume and MailScanner's
been showing in 'top' using 99.9% CPU.</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>After a bit of
investigating (strace -p, debug=yes etc. etc.) - I realised that SpamAssassin
was getting timeouts when talking to Razor2/DCC/Pyzor (my timeout's are set to
10 seconds for each with SpamAssassin timeout set to 60 seconds in
MailScanner.conf)</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Also while in
Debug=yes/SpamAssassin Debug=yes mode I had an occurrence of 'Process did not
exit cleanly, returned 0 with signal 11' just after SpamAssassin ran it's bayes
tests (I think it was about to start a DCC/Razor2 or Pyzor check) and upon
grepping /var/log/messages - I found 64 occurrences of the 'signal 11' in the
logs since it's last log roll.</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>I've since disabled
the DCC/Pyzor/Razor2 checks while I work out what's going on - I also haven't
had any sig11's in the log since I've done this and my load average is down to
0.04 (however it is after 5.30pm here so a lot of my users have gone home, so it
won't get much stressing until tommorow)</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Anyone else
experience anything similar?? - I haven't made any changes to this box for
ages.</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>I'm running
MailScanner 4.22-4, SA 2.60, DCC 1.1.36, Pyzor 0.4.0, Razor-Agents-2.22 and
MailWatch CVS on RH9 running on a Compaq Proliant DL360 G1 933Mhz PIII
with 512Mb RAM.</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Kind
regards,</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2>Steve.</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial
size=2>--</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Steve
Freegard</FONT></SPAN></DIV>
<DIV><SPAN class=218561417-03112003><FONT face=Arial size=2>Systems
Manager<BR>Littlehampton Book Services Ltd.</FONT></SPAN></DIV></BODY>--<br />
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.<br />
<br />
This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.
</HTML>