High CPU usage (need help)

[david touzeau]

Le lundi 25 avril 2011 à 12:41 -0400, Michael Scheidell a écrit :
> On 4/25/11 12:18 PM, david touzeau wrote: 
> > 
> > We can found that tests_pri_0 rule take 90% of time, is it possible
> > to disable this rule ?
> than it is one of your rules.
> disable compiled rules, and run again, see if you can find out which
> one.
> 
> search recent archives for this issue.
> 
> 
> -- 
> Michael Scheidell, CTO
> o: 561-999-5000
> d: 561-948-2259
> ISN: 1259*1300
> > | SECNAP Network Security Corporation 
>       * Best Intrusion Prevention Product, Networks Product Guide
>       * Certified SNORT Integrator
>       * Hot Company Award, World Executive Alliance
>       * Best in Email Security, 2010 Network Products Guide
>       * King of Spam Filters, SC Magazine
> 
> 
> ______________________________________________________________________
> 
> This email has been scanned and certified safe by SpammerTrap®. 
> For Information please see http://www.secnap.com/products/spammertrap/
> 
> 
> ______________________________________________________________________
> 

Dear 

I have disbled compiled rules but same problem

tests_pri_0 is not our rule but a spamassassin rule 

in this email, tests_pri_0 took 43% time and learn 50% of 1817ms that is
very long for a little mail.


pr 25 18:06:56 smtp ch2-11507-02)[11507]: (11507-02) TIMING-SA total
1817 ms - parse: 4 (0.2%), extract_message_metadata: 14 (0.8%),
get_uri_detail_list: 0.94 (0.1%), tests_pri_0: 796 (43.8%),
tests_pri_500: 3 (0.2%), learn: 990 (54.5%), get_report: 1.22 (0.1%)
Apr 25 18:06:56 smtp postfix/smtp[17441]: 1400E488189: to=<xx at xxx>,
relay=127.0.0.1[127.0.0.1]:10024, delay=5.4, delays=3.3/0/0/2,
dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0
Ok: queued as 190D9488151)
Apr 25 18:06:56 smtp postfix/qmgr[14029]: 1400E488189: removed
Apr 25 18:06:56 smtp ch2-11507-02)[11507]: (11507-02) TIMING [total 2044
ms] - SMTP greeting: 1 (0%)0, SMTP EHLO: 0 (0%)0, SMTP pre-MAIL: 0
(0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 39 (2%)2, check_init: 0
(0%)2, digest_hdr: 0 (0%)2, digest_body: 1 (0%)2, gen_mail_id: 1 (0%)2,
custom-new: 0 (0%)2, mime_decode: 11 (1%)3, get-file-type2: 10 (1%)3,
decompose_part: 0 (0%)3, parts_decode: 0 (0%)3, check_header: 1 (0%)3,
AV-scan-1: 8 (0%)4, spam-wb-list: 2 (0%)4, SA parse: 5 (0%)4, SA check:
1809 (88%)92, custom-checks: 7 (0%)93, update_cache: 0 (0%)93,
decide_mail_destiny: 0 (0%)93, custom-before_send: 2 (0%)93,
fwd-connect: 4 (0%)93, fwd-mail-pip: 4 (0%)93, fwd-rcpt-pip: 0 (0%)93,
fwd-data-chkpnt: 0 (0%)93, write-header: 1 (0%)93, fwd-data-contents: 2
(0%)93, fwd-end-chkpnt: 126 (6%)100, custom-after_send: 0 (0%)100,
prepare-dsn: 0 (0%)100, main_log_entry: 6 (0%)100, custom-mail_done: 0
(0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 0 (0%)100,
unlink-2-files: 1 (0%)100, rundown: 0 (0%)100