I found something interesting via strace. lda is writing a timestamp
with utime before doign the fsync, but I'm really not a C guy, so I
have no idea why that's going on via procmail and not via commandline.
I assume it's related to the choice of pread64 vs read.
when called from commandline (working):
read(0, "July 14-20, 2013\n10 courses. Bon"..., 4096) = 4096
read(0, "s bigger\nthan most realistic cyb"..., 4096) = 4096
read(0, "olina company in\nnumerous small,"..., 4096) = 4096
read(0, "on't have any way to tell you\". "..., 4096) = 4096
read(0, "rer. This version of Chrome addr"..., 4096) = 4096
read(0, "edu.\n\nDr. Johannes Ullrich is Ch"..., 4096) = 3164
read(0, "", 932) = 0
umask(0177) = 077
open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/tmp/1370448645.M589211P14191.smtp101", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE, 0777) = when called from procmail (not working): pread64(10, "00.vfemail.net,S=10941\n968 W2552"..., 4064, 52993) = 4064
pread64(10, "53 :1361943010.39085.mx100.vfema"..., 4087, 57057) = 4087
pread64(10, " :1364597743.43999.mx100.vfemail"..., 4085, 61144) = 4085
pread64(10, "mx100.vfemail.net,S=15951\n17287 "..., 4065, 65229) = 4065
pread64(10, "637P32360.smtp101.vfemail.net,S="..., 4074, 69294) = 3967
pread64(10, "", 107, 73261) = 0
umask(0177) = 077
open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/tmp/1370449940.M313792P17436.smtp101", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE, 0777) = Should I attach full traces? They're 32k and 64k respectively. Sorry Rick
11
umask(077) = 0177
open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/dovecot.index.cache", O_RDWR|O_LARGEFILE) =
12
fstat64(12, {st_mode=S_IFREG|0600, st_size=1568768, ...}) = 0
mmap2(NULL, 1568768, PROT_READ, MAP_SHARED, 12, 0) = 0xb7064000
fstat64(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
write(11, "Return-Path:
11
umask(077) = 0177
open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/dovecot.index.cache", O_RDWR|O_LARGEFILE) =
12
fstat64(12, {st_mode=S_IFREG|0600, st_size=1575936, ...}) = 0
mmap2(NULL, 1575936, PROT_READ, MAP_SHARED, 12, 0) = 0xb70b0000
fstat64(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
read(0, "", 1127) = 0
write(11, "Return-Path:
about the lack of threading, I had my subscription off and didn't get
a copy to reply to :/