Troubleshooting increased average scan times

[Chris <cp...@embarqmail.com>]

I'm trying to figure out why my average scan times have about doubled
since a little over a month ago:

7 July
Email:   88  Autolearn:     0  AvgScore: -17.68  AvgScanTime: 12.63 sec
Spam:    30  Autolearn:     0  AvgScore:  70.57  AvgScanTime: 12.20 sec
Ham:     58  Autolearn:     0  AvgScore: -63.33  AvgScanTime: 12.86 sec 

12 Aug
Email:   291  Autolearn:     0  AvgScore:   6.76  AvgScanTime: 25.85 sec
Spam:    127  Autolearn:     0  AvgScore:  63.61  AvgScanTime: 21.61 sec
Ham:     164  Autolearn:     0  AvgScore: -37.26  AvgScanTime: 29.13 sec

The email count is cumulative over a weeks time. I have bind setup and
running correctly AFAICT. One thing I've noticed is that quite a bit of
time is spent loading clam:

19:46:45.795 [312] dbg: ClamAV: invoking File::Scan::ClamAV,
port/socket: /var/lib/clamav/clamd.socket
19:47:04.259 [312] dbg: ClamAV: result - No

Unless I'm reading this wrong it takes almost 20 seconds to scan this
message. I also noticed that in the particular ham I just tested that
razor2 timed out. The actual run time for this message was:
16.15user 0.50system 1:08.78elapsed 24%CPU

On a spam I just tested clam took about 1/10 of a second:

19:58:28.856 [2646] dbg: ClamAV: invoking File::Scan::ClamAV,
port/socket: /var/lib/clamav/clamd.socket
19:58:38.879 [2646] dbg: ClamAV: result - Yes
(INetMsg.SpamDomain-2w.ondebilisim_com.UNOFFICIAL)

But that's the exception rather than the norm. What I'm looking for is
what would be the best way to troubleshoot this?

Thanks for any assistance

Chris

-- 
Chris
KeyID 0xE372A7DA98E6705C