massive log files - being flooded?
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6543
Printed Date: 15 March 2025 at 7:58am
Topic: massive log files - being flooded?
Posted By: hookjd
Subject: massive log files - being flooded?
Date Posted: 22 August 2008 at 4:19am
My spamfilter server just crashed and I've been trying to find out why. Its back up now, but I'm looking at my log files and for the last 2 days my log files have been 1.2GB and 1.8GB each day!
Normally they are about 60MB.
I'm looking at the log files and they are just whizzing by. But when I look at the connections panel it only has 3-8 active at any given time. The log files all look like this, over and over again:
08/22/08 01:01:13:553 -- (3080) Adding to Quarantine file:Qrtn58F3017D-2D20-4D21-82D3-3A4493D4557F.tmp.queued
08/22/08 01:01:13:568 -- (3820) Adding to Quarantine file:Qrtn58F55670-05FE-4C0D-B077-0841DA2EE9CD.tmp.queued
08/22/08 01:01:13:584 -- (4456) Adding to Quarantine file:Qrtn58F5DDAD-7046-4D59-860B-E3EB2F112CC3.tmp.queued
08/22/08 01:01:13:584 -- (4400) EMail from user@domain.com to otheruser@domain.com was received and quarantined. Size: 1 KB, 1024 bytes
08/22/08 01:01:13:600 -- (4240) Adding to Quarantine file:Qrtn58F77A4F-3261-4F89-A9E2-ACEDB9FF7A8A.tmp.queued
what is going on? Email seems to be flowing through, but this can't be good. Am I getting hammered by a specific server? Did a database crash cause a glitch? I really can't tell what I'm seeing.
I am running Enterprise version 4.0.1.785 using MySQL
|
Replies:
Posted By: LogSat
Date Posted: 22 August 2008 at 8:03am
hookjd,
Those log entries by themselves are normal, as all spam email that is quarantined will generate one of those events in the logs. If however you have database problems, while SpamFilter will continue to function, incoming emails will be processed more slowly, and spam emails to be quarantined will be queued up to disk while SpamFilter waits for the database to come back online. SpamFilter will retry to store those queued spam emails to the database on regular intervals, and these retries could indeed fill up the logs if the DB is still offline.
If you can please zip us 2-3 hours worth of SpamFilter's activity logfile and email it to us at support at logsat dot com, we'll try to help further. If the zip is over 5MB in size, please upload it to our ftp site. I'll send you a PM with the ftp login information.
-------------
Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
Posted By: hookjd
Date Posted: 22 August 2008 at 10:55am
|
I have ftp'd you today's log file. I believe I have fixed the problem by addressing potential database corruption and restarting the server... but please do take a look at my logs and tell me what you think.
|
Posted By: LogSat
Date Posted: 22 August 2008 at 11:39am
From your log, here's what we can see:
SpamFilter is started at 00:41:12:453:
-------------
Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
|