LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 03-18-2007, 10:16 AM   #1
Marel
Member
 
Registered: May 2005
Location: Serbia
Distribution: Debian, Ubuntu, Red Hat, Gentoo
Posts: 64

Rep: Reputation: 15
clientmqueue - thousends of files in it


My gateway has Slackware 10.1. I found out that directory /var/spool/clientmqueue contains enormous amount of files. When I run "ls -ld /var/spool/clientmqueue", the size was about 33MB. I became worried that some coruption occured on filesystem, took out the hard drive, put it in faster machine, and ran reiserfsck (the filesystem is reiserfs). It was more than an hour ago and it is still working. I am afraid it will not finish soon, and I need internet connection.

reiserfsck is checking semantic three and outputs files from /var/spool/clientmqueue.

Do you think it is filesystem corruption, or some program is trying to send many emails, some virus or something? I don't run sendmail or other MTA.

If it is not filesystem corruption, is it safe to stop fsck? I could just delete the dir while the machine is running, I don't care how long would it take.

Any help is welcome. Thanks in advance.
 
Old 03-18-2007, 11:37 AM   #2
Alien Bob
Slackware Contributor
 
Registered: Sep 2005
Location: Eindhoven, The Netherlands
Distribution: Slackware
Posts: 5,257

Rep: Reputation: Disabled
I don't know reiser too well to be able to advise you to stop a fsck in the middle...
When your system is up and running again, you should check if your sendmail queue runner is active - that is the process that empties the clientmqueue at regular intervals.
Code:
ps axw|grep clientmqueue
should show something like
Code:
19526 ?        Ss     0:01 sendmail: Queue runner@00:25:00 for /var/spool/clientmqueue
This sendmail process is started from /etc/rc.d/rc.sendmail.

Eric
 
Old 03-18-2007, 11:38 AM   #3
MensaWater
Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 6,002
Blog Entries: 5

Rep: Reputation: 782Reputation: 782Reputation: 782Reputation: 782Reputation: 782Reputation: 782Reputation: 782
I wouldn't interrupt a running fsck.

If the clientmqueue had thousands of files unfortunately it has to process each inode and that takes quite a while.

It doesn't sound like corruption though. You can look at the files - if they are mail files as they're supposed to be you should be able to just cat some examples to verify that's what they are. It should be safe to delete them but before you do you should see what the latest date is. If you're not running MTA and have thousands of files there it sounds like something is trying to send and that might mean you got hit by a spammer.
 
Old 03-18-2007, 12:32 PM   #4
Marel
Member
 
Registered: May 2005
Location: Serbia
Distribution: Debian, Ubuntu, Red Hat, Gentoo
Posts: 64

Original Poster
Rep: Reputation: 15
Thank you for your replies. fsck is still working. I set rc.sendmail to 644 so I suppose that process is not running.

Just if I could know when it will finish...
 
Old 03-18-2007, 03:13 PM   #5
Marel
Member
 
Registered: May 2005
Location: Serbia
Distribution: Debian, Ubuntu, Red Hat, Gentoo
Posts: 64

Original Poster
Rep: Reputation: 15
The task completed half an hour ago, no errors. It was not a spammer. It was certain cron job I setup a long time ago and forgot about it. Cron was sending error emails every minute.

Anyway, I still don't understand how messages got prepared since rc.sendmail is on 644. According to this mailing list post, messages are saved into clientmqueue dir by MSP sendmail instance.

Code:
root         1     0  0 20:43 ?        00:00:05 init [3]
root         2     1  0 20:43 ?        00:00:00 [keventd]
root         3     1  0 20:43 ?        00:00:00 [ksoftirqd_CPU0]
root         4     1  0 20:43 ?        00:00:00 [kswapd]
root         5     1  0 20:43 ?        00:00:00 [bdflush]
root         6     1  0 20:43 ?        00:00:00 [kupdated]
root        10     1  0 20:43 ?        00:00:00 [mdrecoveryd]
root        11     1  0 20:43 ?        00:00:00 [kreiserfsd]
root        37     1  0 20:43 ?        00:00:00 [kapmd]
root        65     1  0 20:43 ?        00:00:00 /usr/sbin/syslogd
root        68     1  0 20:43 ?        00:00:00 /usr/sbin/klogd -c 3 -x
bin        113     1  0 20:43 ?        00:00:00 /sbin/rpc.portmap
root       137     1  0 20:43 ?        00:00:00 dhcpcd -d -t 10 eth1
root       239     1  0 20:43 ?        00:00:00 /usr/sbin/inetd
root       243     1  0 20:43 ?        00:00:00 /usr/sbin/sshd
root       247     1  0 20:43 ?        00:00:00 /usr/sbin/named
root       248   247  0 20:43 ?        00:00:00 /usr/sbin/named
root       249   248  0 20:43 ?        00:00:00 /usr/sbin/named
root       250   248  0 20:43 ?        00:00:00 /usr/sbin/named
root       251   248  0 20:43 ?        00:00:00 /usr/sbin/named
root       263     1  0 20:43 ?        00:00:00 /usr/sbin/rpc.rquotad
root       265     1  0 20:43 ?        00:00:00 [nfsd]
root       266     1  0 20:43 ?        00:00:00 [lockd]
root       267   266  0 20:43 ?        00:00:00 [rpciod]
root       268     1  0 20:43 ?        00:00:00 [nfsd]
root       269     1  0 20:43 ?        00:00:00 [nfsd]
root       270     1  0 20:43 ?        00:00:00 [nfsd]
root       271     1  0 20:43 ?        00:00:00 [nfsd]
root       272     1  0 20:43 ?        00:00:00 [nfsd]
root       273     1  0 20:43 ?        00:00:00 [nfsd]
root       274     1  0 20:43 ?        00:00:00 [nfsd]
root       276     1  0 20:43 ?        00:00:00 /usr/sbin/rpc.mountd
root       279     1  0 20:43 ?        00:00:00 /usr/sbin/rpc.statd
root       281     1  0 20:43 ?        00:00:00 dhcpd eth0
root       286     1  0 20:43 ?        00:00:00 /usr/sbin/crond -l10
daemon     288     1  0 20:43 ?        00:00:00 /usr/sbin/atd -b 15 -l 1
root       291     1  0 20:43 ?        00:00:00 /usr/sbin/apmd
root       292     1  0 20:43 ?        00:00:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/run/mysql/mysql.pid --user=mysql --skipmysql      319   292  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      320   319  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      321   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      322   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      323   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      324   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      325   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      326   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      327   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
mysql      328   320  0 20:43 ?        00:00:00 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql/mysql.pid
root       329     1  0 20:43 ?        00:00:00 /usr/sbin/httpd
root       331     1  0 20:43 ?        00:00:00 /usr/sbin/smbd -D
nobody     333   329  0 20:43 ?        00:00:00 /usr/sbin/httpd
nobody     334   329  0 20:43 ?        00:00:00 /usr/sbin/httpd
nobody     335   329  0 20:43 ?        00:00:00 /usr/sbin/httpd
nobody     336   329  0 20:43 ?        00:00:00 /usr/sbin/httpd
nobody     337   329  0 20:43 ?        00:00:00 /usr/sbin/httpd
root       338     1  0 20:43 ?        00:00:00 /usr/sbin/nmbd -D
root       340   331  0 20:43 ?        00:00:00 /usr/sbin/smbd -D
root       341     1  0 20:43 ?        00:00:01 /usr/sbin/gpm -m /dev/mouse -t ps2
nobody     344     1  0 20:43 ?        00:00:00 /usr/local/bin/noip2
dld        348     1  0 20:43 ?        00:00:03 /usr/bin/amuled -f
root       349     1  0 20:43 tty1     00:00:00 /sbin/agetty 38400 tty1 linux
root       350     1  0 20:43 tty2     00:00:00 /sbin/agetty 38400 tty2 linux
root       351     1  0 20:43 tty3     00:00:00 /sbin/agetty 38400 tty3 linux
root       352     1  0 20:43 tty4     00:00:00 /sbin/agetty 38400 tty4 linux
root       353     1  0 20:43 tty5     00:00:00 /sbin/agetty 38400 tty5 linux
dld        354   348  0 20:43 ?        00:00:00 /usr/bin/amuled -f
dld        355   354  0 20:43 ?        00:00:00 /usr/bin/amuled -f
root       356     1  0 20:43 tty6     00:00:00 /sbin/agetty 38400 tty6 linux
dld        358   348  0 20:43 ?        00:00:00 amuleweb --amule-config-file=/home/dld/.aMule/amule.conf
dld        359   354  0 20:43 ?        00:00:00 /usr/bin/amuled -f
dld        360   358  0 20:43 ?        00:00:00 amuleweb --amule-config-file=/home/dld/.aMule/amule.conf
dld        361   360  0 20:43 ?        00:00:00 amuleweb --amule-config-file=/home/dld/.aMule/amule.conf
root       457   243  0 20:52 ?        00:00:00 sshd: root@pts/2
root       460   457  0 20:52 pts/2    00:00:00 -bash
root       485     1  1 20:56 ?        00:00:09 ls -l /var/spool/clientmqueue
root       502   460  5 21:09 pts/2    00:00:00 ps -Af
I don't see anything that reminds me on sendmail.
 
Old 03-18-2007, 03:19 PM   #6
Alien Bob
Slackware Contributor
 
Registered: Sep 2005
Location: Eindhoven, The Netherlands
Distribution: Slackware
Posts: 5,257

Rep: Reputation: Disabled
Better change rc.sendmail to 755 then... it is really useful to have a mail transport agent running on your Linux station.

Eric
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how to clear out /var/spool/clientmqueue jerlinuxdude Linux - Software 4 03-29-2012 02:02 AM
/var/spool/clientmqueue filling up, but never emptying peckert Linux - Software 1 06-01-2006 06:50 AM
sendmail filling /var/spool/clientmqueue/ on FC4 alesz Linux - Networking 0 10-06-2005 02:50 PM
Sendmail stuck in clientmqueue Manuel-H Linux - Software 0 06-09-2005 04:15 AM
/var/spool/clientmqueue chintanDesai Linux - Software 0 03-22-2004 03:07 PM


All times are GMT -5. The time now is 04:47 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration