bayes_journal mysteriously disappears

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

bayes_journal mysteriously disappears

David C. McCall

SpamAssassin Server version 3.2.5
  running on Perl 5.8.8
  with SSL support (IO::Socket::SSL 1.07)
  with zlib support (Compress::Zlib 2.005)

My user primarily uses pine as the interface, and I've got .procmailrc set as follows:
INCLUDERC=/etc/mail/spamassassin/spamassassin-spamc.rc

and that file looks like:

# send mail through spamassassin
:0fw
| /usr/local/bin/spamc -f

========================================================
Sun Nov 23 19:26:31 PST 2008
total 6.1M
8.0K drwxrwxr-x   2 lynnc spam  4.0K Nov 23 19:16 .
516K drwxr-xr-x  54 lynnc lynnc 508K Nov 23 17:19 ..
592K -rw-rw-r--   1 lynnc spam  668K Nov 23 19:16 auto-whitelist
8.0K -rw-------   1 spam  spam  3.6K Nov 23 19:16 bayes_journal
936K -rw-rw-r--   1 lynnc spam  1.3M Nov 23 19:16 bayes_seen
4.1M -rw-------   1 spam  spam  5.1M Nov 23 19:16 bayes_toks
 12K -rw-rw-r--   1 lynnc spam  5.9K Oct 13 18:03 user_prefs
/var/log # date;dir ~lynnc/.spam*
Sun Nov 23 19:31:10 PST 2008
total 6.1M
8.0K drwxrwxr-x   2 lynnc spam  4.0K Nov 23 19:30 .
516K drwxr-xr-x  54 lynnc lynnc 508K Nov 23 17:19 ..
592K -rw-rw-r--   1 lynnc spam  668K Nov 23 19:16 auto-whitelist
936K -rw-rw-r--   1 lynnc spam  1.3M Nov 23 19:30 bayes_seen
4.1M -rw-------   1 spam  spam  5.1M Nov 23 19:30 bayes_toks
 12K -rw-rw-r--   1 lynnc spam  5.9K Oct 13 18:03 user_prefs

===========================================================
last entry in spamd.log:

Sun Nov 23 19:16:00 2008 [8375] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 41450
Sun Nov 23 19:16:00 2008 [8375] info: spamd: processing message <200811240316.mAO3FwQJ011116@cosmos.sonoma.edu> for lynnc:548
Sun Nov 23 19:16:17 2008 [8375] info: spamd: identified spam (16.0/5.0) for lynnc:548 in 16.9 seconds, 112674 bytes.
Sun Nov 23 19:16:17 2008 [8375] info: spamd: result: Y 16 - BAYES_50,DNS_FROM_DOB,FU_LONG_QUERY3,HTML_MESSAGE,MILLION_USD,MIME_HTML_ONLY,RCVD_IN_DOB,RDNS_D
YNAMIC,SPF_HELO_PASS,SPF_PASS,STRONG_BUY,URIBL_BLACK,URIBL_GREY,URIBL_OB_SURBL,URIBL_RHS_DOB,URI_HEX,US_DOLLARS_3,WHOIS_UNLISTED scantime=16.9,size=112674,
user=lynnc,uid=548,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41450,mid=<200811240316.mAO3FwQJ011116@cosmos.sonoma.edu>,bayes=0.5
00000,autolearn=spam
Sun Nov 23 19:16:17 2008 [8335] info: prefork: child states: II

thanks ahead of time, sorry ahead of time if I'm missing something obvious

dmc
Reply | Threaded
Open this post in threaded view
|

Re: bayes_journal mysteriously disappears - nevermind, foundit

David C. McCall
DOH!   I didn't include --sync in periodic sa-learn runs....


slaps his forehead and returns into cave.


:-(


David C. McCall wrote
SpamAssassin Server version 3.2.5
  running on Perl 5.8.8
  with SSL support (IO::Socket::SSL 1.07)
  with zlib support (Compress::Zlib 2.005)

My user primarily uses pine as the interface, and I've got .procmailrc set as follows:
INCLUDERC=/etc/mail/spamassassin/spamassassin-spamc.rc

and that file looks like:

# send mail through spamassassin
:0fw
| /usr/local/bin/spamc -f

========================================================
Sun Nov 23 19:26:31 PST 2008
total 6.1M
8.0K drwxrwxr-x   2 lynnc spam  4.0K Nov 23 19:16 .
516K drwxr-xr-x  54 lynnc lynnc 508K Nov 23 17:19 ..
592K -rw-rw-r--   1 lynnc spam  668K Nov 23 19:16 auto-whitelist
8.0K -rw-------   1 spam  spam  3.6K Nov 23 19:16 bayes_journal
936K -rw-rw-r--   1 lynnc spam  1.3M Nov 23 19:16 bayes_seen
4.1M -rw-------   1 spam  spam  5.1M Nov 23 19:16 bayes_toks
 12K -rw-rw-r--   1 lynnc spam  5.9K Oct 13 18:03 user_prefs
/var/log # date;dir ~lynnc/.spam*
Sun Nov 23 19:31:10 PST 2008
total 6.1M
8.0K drwxrwxr-x   2 lynnc spam  4.0K Nov 23 19:30 .
516K drwxr-xr-x  54 lynnc lynnc 508K Nov 23 17:19 ..
592K -rw-rw-r--   1 lynnc spam  668K Nov 23 19:16 auto-whitelist
936K -rw-rw-r--   1 lynnc spam  1.3M Nov 23 19:30 bayes_seen
4.1M -rw-------   1 spam  spam  5.1M Nov 23 19:30 bayes_toks
 12K -rw-rw-r--   1 lynnc spam  5.9K Oct 13 18:03 user_prefs

===========================================================
last entry in spamd.log:

Sun Nov 23 19:16:00 2008 [8375] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 41450
Sun Nov 23 19:16:00 2008 [8375] info: spamd: processing message <200811240316.mAO3FwQJ011116@cosmos.sonoma.edu> for lynnc:548
Sun Nov 23 19:16:17 2008 [8375] info: spamd: identified spam (16.0/5.0) for lynnc:548 in 16.9 seconds, 112674 bytes.
Sun Nov 23 19:16:17 2008 [8375] info: spamd: result: Y 16 - BAYES_50,DNS_FROM_DOB,FU_LONG_QUERY3,HTML_MESSAGE,MILLION_USD,MIME_HTML_ONLY,RCVD_IN_DOB,RDNS_D
YNAMIC,SPF_HELO_PASS,SPF_PASS,STRONG_BUY,URIBL_BLACK,URIBL_GREY,URIBL_OB_SURBL,URIBL_RHS_DOB,URI_HEX,US_DOLLARS_3,WHOIS_UNLISTED scantime=16.9,size=112674,
user=lynnc,uid=548,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41450,mid=<200811240316.mAO3FwQJ011116@cosmos.sonoma.edu>,bayes=0.5
00000,autolearn=spam
Sun Nov 23 19:16:17 2008 [8335] info: prefork: child states: II

thanks ahead of time, sorry ahead of time if I'm missing something obvious

dmc
Reply | Threaded
Open this post in threaded view
|

Re: bayes_journal mysteriously disappears - nevermind, foundit

Matt Kettler-3
David C. McCall wrote:
> DOH!   I didn't include --sync in periodic sa-learn runs....
>
>
> slaps his forehead and returns into cave.
>
>
> :-(
>  

You shouldn't need --sync, unless you want to force the journal to be
synced and deleted when you run sa-learn. In general it will decide if
it needs to be synced on its own. It's also redundant if you have
--force-expire, as SA always syncs the journal prior to doing expiry.


In general, the journal disappearing is normal. It's just a "holding
tank" for atime updates (and tokens if you have learn to journal
enabled), It periodically gets dumped into the main database and deleted
during the expiry checks.

So, don't be concerned about it disappearing, that just means it's been
synced and hasn't been recreated by mail scanning.