Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - massive log files - being flooded?
  FAQ FAQ  Forum Search   Register Register  Login Login

massive log files - being flooded?

 Post Reply Post Reply
Author
hookjd View Drop Down
Newbie
Newbie


Joined: 22 June 2006
Status: Offline
Points: 38
Post Options Post Options   Thanks (0) Thanks(0)   Quote hookjd Quote  Post ReplyReply Direct Link To This Post Topic: massive log files - being flooded?
    Posted: 22 August 2008 at 4:19am
My spamfilter server just crashed and I've been trying to find out why.  Its back up now, but I'm looking at my log files and for the last 2 days my log files have been 1.2GB and 1.8GB each day!

Normally they are about 60MB.

I'm looking at the log files and they are just whizzing by.  But when I look at the connections panel it only has 3-8 active at any given time.  The log files all look like this, over and over again:

08/22/08 01:01:13:553 -- (3080) Adding to Quarantine file:Qrtn58F3017D-2D20-4D21-82D3-3A4493D4557F.tmp.queued
08/22/08 01:01:13:568 -- (3820) Adding to Quarantine file:Qrtn58F55670-05FE-4C0D-B077-0841DA2EE9CD.tmp.queued
08/22/08 01:01:13:584 -- (4456) Adding to Quarantine file:Qrtn58F5DDAD-7046-4D59-860B-E3EB2F112CC3.tmp.queued
08/22/08 01:01:13:584 -- (4400) EMail from user@domain.com to otheruser@domain.com was received and quarantined. Size: 1 KB, 1024 bytes
08/22/08 01:01:13:600 -- (4240) Adding to Quarantine file:Qrtn58F77A4F-3261-4F89-A9E2-ACEDB9FF7A8A.tmp.queued

what is going on?  Email seems to be flowing through, but this can't be good.  Am I getting hammered by a specific server?  Did a database crash cause a glitch?  I really can't tell what I'm seeing.

I am running Enterprise version 4.0.1.785 using MySQL

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 22 August 2008 at 8:03am
hookjd,

Those log entries by themselves are normal, as all spam email that is quarantined will generate one of those events in the logs. If however you have database problems, while SpamFilter will continue to function, incoming emails will be processed more slowly, and spam emails to be quarantined will be queued up to disk while SpamFilter waits for the database to come back online. SpamFilter will retry to store those queued spam emails to the database on regular intervals, and these retries could indeed  fill up the logs if the DB is still offline.

If you can please zip us 2-3 hours worth of SpamFilter's activity logfile and email it to us at support at logsat dot com, we'll try to help further. If the zip is over 5MB in size, please upload it to our ftp site. I'll send you a PM with the ftp login information.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
hookjd View Drop Down
Newbie
Newbie


Joined: 22 June 2006
Status: Offline
Points: 38
Post Options Post Options   Thanks (0) Thanks(0)   Quote hookjd Quote  Post ReplyReply Direct Link To This Post Posted: 22 August 2008 at 10:55am
I have ftp'd you today's log file.  I believe I have fixed the problem by addressing potential database corruption and restarting the server... but please do take a look at my logs and tell me what you think.  
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 22 August 2008 at 11:39am
From your log, here's what we can see:

SpamFilter is started at 00:41:12:453:
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.297 seconds.